Skills and Competence Development
Establish and make available a personal data protection training curriculum and other employee developmental mechanisms to ensure employees have the required skills and competences.
Improvement Planning
Practices-Outcomes-Metrics (POM)
Representative POMs are described for Skills and Competence Development at each level of maturity.
- 2Basic
- Practices
- Develop and begin to roll out some basic personal data protection training and development programmes.
- Record employee participation in formal training.
- Outcome
- There is increased understanding of the role and value of personal data protection in day-to-day business activities.
- Metrics
- # of training and development programmes available.
- % of data protection practices supported by available training.
- % of employees who have taken training.
- 3Intermediate
- Practices
- Develop and deliver personal data protection training and development programmes across most areas of the business, and provide on-demand training for selected employees.
- Record and track participation by employees in most instances.
- Outcome
- There is widespread understanding of the role and value of personal data protection, and there is an opportunity to supplement scarce resources and improve data protection on a more timely basis.
- Metrics
- # of training and development programmes available.
- % of data protection practices supported by available training.
- % of employees who have taken training.
- 4Advanced
- Practices
- Proactively deliver comprehensive personal data protection training and development programmes across the organization, and tailor the programmes to address some individual requirements.
- Record and track participation by employees in all instances.
- Outcome
- Personal data protection can be further improved as a result of organization-wide availability of training and development programmes and tailored (not generic) training.
- Metrics
- # of training and development programmes available.
- % of data protection practices supported by available training.
- % of employees who have taken training.
- % of employees who are overdue refresher training.
- 5Optimized
- Practice
- Continually review personal data protection training and development programmes for improvement opportunities based on objectives, latest standards, legislative and regulatory requirements, and results from previous activities, and adjust them as required to address knowledge gaps.
- Outcomes
- There is consistent and up-to-date understanding of personal data protection training requirements.
- Training and development programmes are regarded as industry exemplars.
- Metrics
- Frequency of review and update to training and development programmes.
- Level of stakeholder satisfaction with training.