GDPR Risks of Remote Working
Practical training on the data protection risks of working outside chambers, and how to manage them.
Duration
1 Hour
Lessons
6
CPD Hours
1
Certificate
On Completion
WHAT YOU WILL LEARN
Six practical outcomes from this training
Understand the specific data protection risks that arise when working outside chambers — at home, in transit, or in shared spaces
Identify the physical, electronic, and cyber security threats to personal data in a remote working environment
Learn from real examples of remote working data breaches and what went wrong in each case
Recognise common scams that target remote workers, including phishing emails and fraudulent requests
Know the steps to take if a data breach occurs while you are working remotely, including who to notify and when
Apply practical controls to your own remote working setup — securing devices, networks, and physical workspace to meet ICO expectations
About this training
Remote and hybrid working is now standard practice across the Bar. But working outside chambers introduces data protection risks that most barristers and staff do not encounter in a traditional office environment. Unsecured Wi-Fi, shared household devices, documents left visible on screens, conversations overheard in public spaces — each creates an opportunity for personal data to be compromised.
The ICO has made clear that data protection standards must not slip when people work from home. This training covers the practical risks and the practical steps you can take to manage them.
Using real examples of remote working breaches, the course covers physical security, electronic security, cyber threats, and what to do if something goes wrong. It is designed for anyone who handles personal data outside chambers — barristers, clerks, and chambers staff alike.
Key topics
-
1
The basics of data protection and remote working
-
2
Physical security risks when working outside chambers
-
3
Electronic security: devices, networks, and cloud storage
-
4
Cyber threats targeting remote workers
-
5
Recognising common scams and social engineering
-
6
What to do when a data breach occurs
What learners say
“This course is structured well, with a variety of examples showing the pitfalls of remote working. It does a great job of depicting real-life scenarios and summarising actions that should be followed in each instance.”
Frequently asked questions
Yes. Remote and hybrid working is now standard at the Bar, but working outside chambers creates data protection risks that many barristers and staff do not fully recognise. The ICO has made clear that data protection standards must not slip when people work from home. Understanding these risks and the practical steps to manage them is essential for compliance with the UK GDPR and protecting client confidentiality.
Home networks are often unsecured, devices may be shared with family members, screens are visible to others in shared spaces, and paper documents may be left unattended. Public Wi-Fi is inherently insecure. Each creates an opportunity for personal data to be accidentally disclosed or lost. The training covers physical security, electronic security, cyber threats, and common scams that target remote workers.
A policy should cover device security (passwords, encryption, updates), network security (avoiding public Wi-Fi, using VPNs), screen and document security (not working in public spaces, keeping screens private), and the specific steps to follow if a breach occurs. The training identifies the practical risks and the controls needed to mitigate them, providing evidence for compliance audits and insurance renewals.
The UK GDPR requires breaches that meet the threshold to be reported to the ICO within 72 hours of becoming aware of them. The clock starts immediately. Delay or failure to report can result in enforcement action and fines. Individuals affected must also be notified without undue delay if the breach poses high risk to their rights and freedoms. This training covers the notification procedures and the evidence you need to record.
This is permissible only if appropriate security controls are in place. Personal devices must be encrypted, passwords must be strong, and the device must not be accessible to others. However, many chambers now provide secure chambers devices for remote work, which is the safer approach. The training covers how to assess the security of devices and what controls are necessary to justify personal device use. This training addresses the practical reality of how remote working occurs at the Bar and covers the steps to take to manage the risks safely.
Related training
Related services
Briefed offers advisory, audit, and policy services alongside training. If your chambers needs support beyond eLearning, we can help.