European Privacy Training – CIPP/E
12K+ Satisfied learners Read Reviews

Introduction to Privacy

• Definition
• Purpose of Privacy
• Privacy in Security
• Information Privacy
• Security and Privacy

Key Terms and Acronyms

GDPR Regulation 

• 11 Chapters (99 Articles)

Introduction to European Data Protection

• Origins and Historical Context of Data Protection Law
• European Union Institutions
• Legislative Framework

European Data Protection Law and Regulation 

• Data Protection Concepts
  • Personal Data
  • Sensitive Personal Data
  • Pseudonymous and Anonymous Data
  • Processor and Processing
  • Controller
  • Data Subject

• Territorial and Material Scope of the General Data Protection Regulation
  • Establishment in the EU
  • Non-establishment in the EU

• Data Processing Principles
  • Fairness and Lawfulness
  • Purpose Limitation
  • Proportionality
  • Accuracy
  • Storage Limitation (Retention)
  • Integrity and confidentiality

• Lawful Processing Criteria
  • Consent
  • Contractual Necessity
  • Legal obligation, vital and public interest
  • Legitimate interests
  • Special categories of processing

• Information Provision Obligations
  • Transparency principle
  • Privacy notices
  • Layered notices

• Data Subjects’ Rights
  • Access
  • Rectification
  • Erasure and Right to be Forgotten
  • Restriction and objection
  • Consent, including right of withdrawal
  • Automated decision-making including profiling
  • Data portability

• Security of Personal Data
  • Appropriate technical and organizational measures
  • Breach notification
  • Vendor management
  • Data sharing

• Accountability Requirements
  • Responsibility of controllers and processors
  • Data protection by design and default
  • Documentation and cooperation with regulators
  • Data protection impact assessments
  • Data protection officers

• International Data Transfers
  • Rationale for prohibition
  • Safe Harbor and Privacy Shield
  • Model Contracts
  • Binding Corporate Rules
  • Codes of Conduct and certification
  • Derogations

• Supervision and enforcement
  • Supervisory authorities and their powers
  • The European Data Protection Board
  • Role of the EDPB

• Consequences for GDPR violations
  • Infringement and fines

Compliance with European Data Protection Law and Regulation

• Employment Relationship
  • Legal basis for processing of employee data
  • Storage of personnel records
  • Workplace monitoring and data loss prevention
  • EU Works councils
  • Whistleblowing systems
  • ‘Bring your own device’ (BYOD) programs

• Surveillance Activities
• Direct Marketing
• Internet Technology and Communications
• Cloud computing
• Web cookies
• Search engine marketing (SEM)
• Social networking services
• Artificial Intelligence (AI)

Case Studies / Practical Examples

Best Practices and Key Areas