Client requesting GDPR training

[Dark Black]

I've done a search on this and (surprisingly perhaps) can't find anything on the forum about this,, so don't shoot me down if I've missed a thread somewhere.

My end client has recently requested everyone does the GDPR training course. They've included contractors in this.

Now, I don't think that, as an independent contractor working via my own Ltd, it is necessary to take part in this because MyCo has it's own GDPR policy.

Other contractors here must have come across this by now so I was curious about the general opinion on this before I talk to the client.

If you've been in this situation, have you just done it for a quiet life, or did you discuss with the client and not do it?

[SteelyDan]

I've done a search on this and (surprisingly perhaps) can't find anything on the forum about this,, so don't shoot me down if I've a thread somewhere.

My end client has recently requested everyone does the GDPR training course. They've included contractors in this.

Now, I don't think that, as an independent contractor working via my own Ltd, it is necessary to take part in this because MyCo has it's own GDPR policy.

Other contractors here must have come across this by now so I was curious about the general opinion on this before I talk to the client.

If you've been in this situation, have you just done it for a quiet life, or did you discuss with the client and not do it?

I'm guessing this will come under 'mandatory training' so basically if you wish to remain on-site, you'll need to comply. I personally would just do it & not make a big deal of it.

[DeludedKitten]

Client asked everyone. I did it.

[northernladuk]

You are handling their data. Nothing wrong with giving you basic competency training to make sure it's safe.

[Hobosapien]

Yup, I look at these types of client requirements as compliance checks for handling the client's sensitive data and systems.

My current client removes access to all systems unless pass compliance and they re-check it every year or so and anyone failing compliance is reported to a director for a . As a contractor I expect that means termination of contract.

[vetran]

Its THEIR responsibility that those handling THEIR customer's data are competent to do so. So THEY are organising mandatory training for such people regardless of employment status.

You of course have your own policies for YOUR customer's data.

Take a day off at training & enjoy the biscuits.

just my take.

[Lance]

the fact that you don't understand the difference between your clients GDPR policy and your own LTD company's, and the reason why they'd want you to know theirs, suggests that you would benefit from the training.

Just a thought.

[northernladuk]

the fact that you don't understand the difference between your clients GDPR policy and your own LTD company's, and the reason why they'd want you to know theirs, suggests that you would benefit from the training.

Just a thought.

This is generally the first thing that crosses my mind when these types of questions are asked as well. Surely some basic understanding (and maybe common sense) would make it clear what training is essential and what isn't. Thinking about what diligence a client should be doing to protect their data and not be splashed all over the papers should be pretty clear in most cases.

[GreenMirror]

No matter how much end training IBs give their workers, temporary, contract, or permanent, their morals still seem to be in the gutter.

Personally I just do the training - 2 days when I started then around an hour a month.

[Old Greg]

Quote them two grand per day to deliver the training. Nick some slides off the interweb. Job's a good 'un.