As privacy obligations become more complex and regulatory expectations continue to increase, organisations need more than awareness of the reforms. They need a practical plan for implementation.
This interactive workshop is designed to help participants move beyond theory and consider how Australia’s evolving privacy reforms may affect their organisation’s data practices, governance and compliance framework.
Using realistic scenarios, facilitated discussions and practical exercises, participants will work through four areas: remapping personal information holdings; applying the proposed fair and reasonable test to common business uses; considering controller and processor roles, security, retention and breach readiness; and identifying policy, automated decision-making, governance and remediation priorities.
What we’ll cover
- The expanded scope of personal information, including inferred, generated, location and technical data, and how to stress-test an existing data inventory
- How the proposed fair and reasonable test may apply to marketing and personalisation, analytics and profiling, and data-sharing or supplier arrangements
- Consent and collection notices, including common failure points and areas for review
- Controller and processor roles, supplier arrangements, security, retention and destruction considerations
- The proposed 72-hour breach notification process and the elements organisations should consider when reviewing incident response arrangements
- Automated decision-making disclosure requirements and practical steps for identifying and describing relevant systems
- Privacy policy, governance, assurance and board-reporting considerations
- How to prioritise privacy reform activities over a 12-month implementation period
Practical workshop activities
Participants will work through practical exercises and examples designed to help them apply the concepts to their own organisation, including:
- A data inventory stress test using a high-volume collection point
- A fair and reasonable assessment exercise across marketing or personalisation, analytics or profiling, and data-sharing or supplier use cases
- Discussion of the components of a 72-hour breach response approach
- Review of automated decision-making disclosure, privacy policy and governance considerations
- A worked 12-month roadmap showing how key remediation activities could be sequenced
Meet Your Facilitator
Louise Matthews – Senior Risk & Compliance Legal Consultant, GRC Solutions
Louise is a highly experienced legal, compliance and regulatory affairs specialist with more than two decades of experience in the Australian financial services sector. Her career has included senior advisory and leadership roles with organisations including Aware Super, Hostplus, PwC and KPMG. Louise advises organisations on governance, risk management and regulatory compliance and regularly delivers practical compliance education and thought leadership programs.
Registration Fees
Workshop Registration Fee (incl. GST)
- $565 Standard Registration
- $480 for GRC Solutions Compliance Notes subscribers (15% subscriber discount)
Sydney 25th November: only 14 seats
Venue: Melbourne TBC
