Report Writing and Courtroom Skills
Course View More
Data Protection, GDPR and the Law Enforcement Directive
This course is for investigators who work in public bodies or local authorities to understand the principles of data protection and the relationship between the GDPR and the Law Enforcement Directive.
795
Online
2 days
About this course
As an investigator are you having difficulty accessing data for the purposes of law enforcement? Are you clear about subject access requests where the information is sought in the context of an ongoing investigation? Do you understand the legal basis of such requests? Are you clear as to the difference between the GDPR and the Law Enforcement Directive and when each applies?
This course is relevant to managers working in the field of data protection and managers who are engaged in law enforcement where there is a requirement to process data, or to obtain data from other agencies.
Course syllabus
Key learning points:
- Understand the principles of GDPR,
- Understand the principles of the Law Enforcement Directive,
- Understand the importance of defining the purpose of processing,
- Examine the importance of security of data,
- Examine access requests and the limitation of access where the Law Enforcement Directive applies,
- Examine Data Protection Impact Assessments,
- Learn the importance of proper registration of processing.
Module 1:
- History of Data Protection Law
- Overview of GDPR
- Principles of Data Protection
- Data Protection Impact Assessment
- Data Protection by design and default
Module 2:
- The Law Enforcement Directive- Part 5 Data Protection Act 2018
- Defining purpose of processing
- Relationship between GDPR and LED
- Data Sharing in the public sector
- Subject access requests
- Difference between an access request under GDPR and under the LED
Module 3:
- Security of data
- Responding to a security breach
- Case studies
Module 4:
- Differences between Freedom of Information requests and GDPR requests
- The role of the Data Protection Commission
- Transfer of data to third countries
- Data Governance
- Record of Processing Activities
Meet the trainer – Judy Peters
Solicitor and Training Consultant
Judy Peters is a highly experienced lawyer and legal trainer with a distinguished career spanning over four decades. She was admitted as a solicitor in England in 1979, in Northern Ireland in 1983 and...
Read BioPractical training with small groups to ensure quality.
Our training sessions are not lectures—they're practical, interactive experiences. The small group format allows every attendee to ask questions, take part in discussions involving practical exercises and role-plays.
This method of training allows attendees to put the skills learned into practice immediately. Course participants benefit from the focused attention and guidance of an independent expert.
Data Protection, GDPR and the Law Enforcement Directive
FAQs
This course explains how data protection law applies in Ireland under both the General Data Protection Regulation (GDPR) and the Law Enforcement Directive (LED). It focuses on how organisations, particularly public bodies, must handle personal data in compliance with the Data Protection Act 2018.
GDPR applies to the general processing of personal data by organisations, while the Law Enforcement Directive applies specifically to the processing of personal data for law enforcement purposes, such as the prevention, investigation, detection or prosecution of criminal offences. In Ireland, both are implemented through the Data Protection Act 2018.
This course is particularly relevant for local authority staff, enforcement officers, compliance professionals, and anyone handling personal data in a regulatory or investigative context. It is also useful for legal advisers and public sector managers responsible for data governance.
Enforcement work often involves handling sensitive personal data. Understanding the correct legal basis for processing, data sharing rules, and individuals’ rights is essential to avoid breaches and ensure evidence is lawfully obtained and admissible.
Data protection in Ireland is governed by the EU GDPR and the Law Enforcement Directive, both given effect through the Data Protection Act 2018. The Data Protection Commission is the supervisory authority responsible for enforcing these laws.
Key topics include the principles of data protection, lawful processing, data subject rights, distinctions between GDPR and LED regimes, data sharing in enforcement contexts, retention policies, and handling breaches. The course also addresses practical compliance challenges in Irish public bodies.
The Law Enforcement Directive applies when personal data is processed for law enforcement purposes by competent authorities, such as investigating offences or prosecuting individuals. GDPR applies in all other contexts, including general administrative processing.
Non-compliance can lead to enforcement action, reputational damage, and potential fines. In addition, improperly handled data may undermine investigations or prosecutions, particularly if evidence is found to have been obtained unlawfully.
Yes. It addresses when and how personal data can be shared lawfully between agencies, particularly in enforcement scenarios, and the safeguards required under both GDPR and the Law Enforcement Directive.
Yes. The course is designed to be practical and accessible, explaining complex legal concepts in a clear way for professionals who are not legally qualified but who have responsibility for handling personal data.
