EU General Data Protection Regulation, Binding Corporate Rules And Privacy Shield Training Requirements | Bloomberg BNA
Under Article 37, the GDPR tasks the Data Protection Officer (DPO) with “awareness raising and training of staff involved in the processing operations.”
Under Article 43, in connection with Binding Corporate Rules(BCRs), the GDPR requires “the appropriate data protection training to personnel having permanent or regular access to personal data.”