You are:

Understanding and planning for GDPR : A masterclass for HR professionals

10:00AM, 22 November 2017
Central London

  1. Programme
  2. Booking
The General Data Protection Regulation (GPDR) became EU law in May 2016 and comes into effect in the UK on 25 May 2018.  This masterclass covers key actions for employers regarding the collection, transfer and use of staff data. It also covers the main practical impact of GDPR on day to day HR activities and processes.
Participants at this masterclass will understand:
  • What current law requires and common areas of non-compliance that must be addressed prior to considering the stricter, GDPR standards. 
  • The timing, scope and impact of the implementation of the GDPR requirements and the audit steps that must be taken before any further compliance work can be effective.
  • Key changes brought in by the GDPR, alongside an assessment of their impact in the higher education sector and details of how other sectors have approached these requirements.
  • How to spot current issues and anticipate areas of non-compliance, alongside initial suggestions for how to start to change and update internal practices to limit material risks and start to integrate privacy by design and default. 
  • How to more fully contribute to the wider GDPR process internally within your organisation, to ensure the HR aspects are dealt with in detail (and to deliver the best possible compliance outcomes).
The masterclass will take a step by step approach with ample opportunity to ask questions. On the day we will work through examples to help attendees understand the practical steps that need to be taken from an HR perspective. 


The masterclass will be facilitated by Dave Hughes, a Principal Associate in the Privacy and Information Law team at Eversheds Sutherland. He is working closely with HR contacts and employers across all sectors as they prepare for the GDPR.
His recent experience includes a full range of compliance audit work: drafting internal audit questionnaires, reviewing and analysing responses, advising on and prioritising risk and making recommendations for addressing compliance gaps. Dave also assists with the implementation of those recommendations including policy work, training, security breach management and reporting, intra-group data sharing and international transfers, fair notice and consent, advising on subject access requests and other data subject rights and dealing with complaints to the Information Commissioner’s Office. 



The masterclass will run between 10.00 am and 3.30 pm (registration from 9.30 am) and a timed programme can be foudn below:

Understanding and planning for GDPR - masterclass for HR professionals - Programme 

Prices and booking processes:

Delegates from UCEA member HEIs

£335 per place

If you work at a UCEA member institution book places via the online booking form

Delegates from other HEIs and HE sector agencies

£435 per place

If you work for an HEI not in UCEA membership or another HE sector agency please email for more details.

If you work at a health service partner body please email for more details.