Stewart Room is a barrister and solicitor, and is President of the National Association of Data Protection and Freedom of Information Officers (NADPO).

• Part I - The Big Picture1. Introduction to data protection2. Introduction to the GDPR3. Introduction to ePrivacy4. Introduction to operational data protectionPart II - Core Law5. The principles of data protection6. The rights of data subjectsPart III - Operating Internationally7. National supervision within an international framework8. Transferring data between the GDPR landmass and third countries9. Data protection beyond the GDPR landmassPart IV - Delivery10. Mechanisms to support operational compliance11. Programmatic approaches for delivering data protection by design and default12. Being accountable for records of processing, legitimate interests and risk management13. 'The journey to code'Part V - Adverse Scrutiny14. How to prepare for the risks of challenge and 'adverse scrutiny'15. Complaints, rights requests, regulatory investigations and litigation16. Regulatory action17. Handling personal data breaches

The past few years has seen transformative changes in privacy, particularly in the UK, where GDPR and Brexit have created a host of new and potentially divergent data protection laws. In this book, Stewart and his team distill several decades of accumulated privacy, data protection and information governance experience and know-how into a guide that’s essential reading for data protection newcomers and experienced practitioners alike.

Stewart Room is a barrister and solicitor, and is President of the National Association of Data Protection and Freedom of Information Officers (NADPO).

• Part I - The Big Picture1. Introduction to data protection2. Introduction to the GDPR3. Introduction to ePrivacy4. Introduction to operational data protectionPart II - Core Law5. The principles of data protection6. The rights of data subjectsPart III - Operating Internationally7. National supervision within an international framework8. Transferring data between the GDPR landmass and third countries9. Data protection beyond the GDPR landmassPart IV - Delivery10. Mechanisms to support operational compliance11. Programmatic approaches for delivering data protection by design and default12. Being accountable for records of processing, legitimate interests and risk management13. 'The journey to code'Part V - Adverse Scrutiny14. How to prepare for the risks of challenge and 'adverse scrutiny'15. Complaints, rights requests, regulatory investigations and litigation16. Regulatory action17. Handling personal data breaches

The past few years has seen transformative changes in privacy, particularly in the UK, where GDPR and Brexit have created a host of new and potentially divergent data protection laws. In this book, Stewart and his team distill several decades of accumulated privacy, data protection and information governance experience and know-how into a guide that’s essential reading for data protection newcomers and experienced practitioners alike.

Stewart Room is a barrister and solicitor, and is President of the National Association of Data Protection and Freedom of Information Officers (NADPO).

• Part I - The Big Picture1. Introduction to data protection2. Introduction to the GDPR3. Introduction to ePrivacy4. Introduction to operational data protectionPart II - Core Law5. The principles of data protection6. The rights of data subjectsPart III - Operating Internationally7. National supervision within an international framework8. Transferring data between the GDPR landmass and third countries9. Data protection beyond the GDPR landmassPart IV - Delivery10. Mechanisms to support operational compliance11. Programmatic approaches for delivering data protection by design and default12. Being accountable for records of processing, legitimate interests and risk management13. 'The journey to code'Part V - Adverse Scrutiny14. How to prepare for the risks of challenge and 'adverse scrutiny'15. Complaints, rights requests, regulatory investigations and litigation16. Regulatory action17. Handling personal data breaches

The past few years has seen transformative changes in privacy, particularly in the UK, where GDPR and Brexit have created a host of new and potentially divergent data protection laws. In this book, Stewart and his team distill several decades of accumulated privacy, data protection and information governance experience and know-how into a guide that’s essential reading for data protection newcomers and experienced practitioners alike.