The GDPR Workshop will be looking at how far your organisation has come on its journey to compliance and will try to answer questions such as:

What good governance is needed to comply to GDPR for staff and volunteers
The does and don’ts with a subject access request?
Has data compliance affected the way your charity fundraises?
Has the donor experience with your charity changed due to the GDPR?
How clean is your data?
What happens if there is a data breach at your charity?
What do you need to know about data segmentation and targeting donors in your CRM?
We will review best practice, codes, technology, cyber security, CRM, certification and standardisation.

About the facilitator

Michelle Hourican is a shareholder of Datatrails. Michelle brings a wealth of experience; she trained as an auditor in Business Services Department in Deloitte, she moved to Management Consulting within Deloitte, for many years engaging with clients as a Senior Manager. She is a Fellow of ACCA and holds an MSc in Management and Application of IT in Accounting. Michelle holds an advanced diploma in data protection law in The Honourable Society of Kings Inns and she is a Certified Information Privacy Professional (CIPP/E). She lectured ACCA and Business Studies for many years. She was awarded the ACCA ‘Accountant of the Year 2015’.

Currently Michelle is a director of a Credit Union where she chairs the Audit, Compliance and Risk Committee. She serves on the IT Committee and is past Chairperson. She is also a Global Council member of ACCA, served on the Governance Design Committee and is currently serving on Markets Oversight Committee.

Michelle has extensive experience in the not for profit sector, public sector and private sector from ICT reviews, Management Information Framework (MIF) reviews, system implementation and development of policies and procedures as a management consultant in Deloitte.

Michelle has managed various roles on data protection from readiness assessments, implementation consulting, data breach advisory, subject access request advisory, data protection impact management advisory, development and review of organisational policies, third party processing advisory, and audits on GDPR to clients from a variety of sectors.