Stewart Room 
Data Protection and Compliance 
Second edition

Part I – The Big Picture

1. Introduction to data protection

2. Introduction to the GDPR

3. Introduction to e Privacy

4. Introduction to operational data protection

Part II – Core Law

5. The principles of data protection

6. The rights of data subjects

Part III – Operating Internationally

7. National supervision within an international framework

8. Transferring data between the GDPR landmass and third countries

9. Data protection beyond the GDPR landmass

Part IV – Delivery

10. Mechanisms to support operational compliance

11. Programmatic approaches for delivering data protection by design and default

12. Being accountable for records of processing, legitimate interests and risk management

13. ‘The journey to code’

Part V – Adverse Scrutiny

14. How to prepare for the risks of challenge and ‘adverse scrutiny’

15. Complaints, rights requests, regulatory investigations and litigation

16. Regulatory action

17. Handling personal data breaches