Ariadna Torrijos, Professor in “Criminal liability of legal entities: Criminal compliance and procedural aspects”; and “Data Protection Delegates and control authorities” in the Master in Compliance and Data Protection Management from the EIP International Business School. tells us about the importance of organizational formation
System of Compliance o Data Protection
All system models Compliance or data protection of an organization, provides, at a minimum, for annual training of its workers. A tool that, when properly designed, can be very useful for a Data Protection or Compliance Officer in the development of their functions.
Although training must always be adapted to the entity and professionals to whom it is directed, there are a series of premises and generalities that all good training must comply with:
- Transfer the intended objectives with respect for the regulations and the adoption of the proposed behaviors.
- Be clear, didactic, understandable and reflect real, everyday situations.
- Provide tools to improve the capabilities of employees when dealing with situations contrary to regulations.
- Show alignment with the organization's objectives, so that respect for regulations becomes one of them.
- Be composed of general training aimed at all employees and other specific training, focused on different business areas.
- Involve the organization's human team, committing its members to the defense of common values and the safeguarding of the entity.
- Promote a culture of awareness, by preparing periodic awareness-raising communications on the subject, in different formats (emails, newsletters, advertising, screensavers, office supplies...).
- Be evaluable, to measure the knowledge acquired, know the effectiveness of the training and, if necessary, improve it.
Data Protection or Compliance: Social Qualities and Skills
Every good DPO or CO (or sometimes the same professional that encompasses both functions) must possess a series of qualities inherent to their role such as autonomy, integrity, resilience, discretion, diligence and proactivity; But they must also display social skills, such as being a good communicator, having the ability to empathize with the rest of the departments of the organization and knowing how to gain the necessary and vital trust for the correct development of their tasks.
This is why training moments should be understood as an ideal opportunity given to these professionals to optimize their mission, during which it will undoubtedly be possible to get to know the rest of their colleagues better, create links, understand the operations in more detail. ongoing, foresee new risks to those already detected in previous evaluations, and ultimately, be perceived as the allies that both figures really are: support within the organization, capable of detecting risks and offering solutions (sometimes creative) and in accordance with regulations, to problematic situations that may arise in the professional's daily life, and not as a hostile department not aligned with the entity's objectives.
Benefits of a Compliance and Data Protection system
In relation to the idea of being perceived as allies and not as enemies, and of reinforcing the positive and necessary role of their mission, there are a series of notions, associated with the benefits of having a Compliance and data protection system, that With good training they can be easily transmitted and gradually internalized by the rest of the members of the organization, such as:
- The greatly reduced risk situations, which can lead to the imposition of large economic sanctions and put the continuity of the organization at risk.
- Increased security for employees, by teaching them the limits they cannot exceed, to avoid harm to the company and their own person.
- Use as evidence to judicially demonstrate the organization's due diligence in preventing violations of regulations and, consequently, avoiding liability.
Finally, it is necessary to highlight the importance of training for the entity at a strategic level, as a reinforcement of the corporate vision, to serve as a gear for the engine of continuous improvement, to preserve corporate integrity and as a guarantor of one of the most precious treasures of any entity, its reputation.
Do you want to specialize in Compliance Management and data protection?
He Master in Compliance & Data Protection Management will make you a highly qualified professional with the necessary skills to carry out specialized tasks in two of the most relevant areas for both private businesses as for public administrations: data protection and regulatory compliance or Compliance.
