Data Privacy & GDPR Foundation Course

What is the GDPR Foundation?

Introduction to EU-GDPR

The EU-General Data Protection Regulation (GDPR) is a comprehensive data protection law enacted by the European Union (EU) that came into effect on May 25, 2018. It aims to enhance individuals’ control over their data and unify data protection regulations across the EU. The EU-GDPR represents a significant shift in data protection regulation, emphasizing transparency, accountability, and the rights of individuals while placing stringent requirements on organizations handling personal data.

 Training Objectives

The training program helps the learners understand the significant shift in the data protection landscape, emphasizing transparency, accountability, and the rights of individuals while placing stringent requirements on organizations handling personal data.

The training program emphasizes 4 aspects of the EU-GDPR;

1. The Key Principles.

• How must personal data be processed lawfully, fairly, and transparently?
• Why must data be collected for specified, explicit, and legitimate purposes?
• Why data collection should be adequate, relevant, and limited to what is necessary?
• How must personal data be accurate and kept up to date?
• What is the storage limitation of personal data?

 2. Rights of Data Subjects

• The Right to be Informed
• The Right of Access
• The Right to Rectification
• The Right to Erasure
• The Right to Restrict Processing
• The Right to Data Portability
• The Right to Object
• The Rights Related to Automated Decision-Making and Profiling

 3. Obligations for Businesses and Organizations

• Why and how do organizations integrate data protection into their processing activities and business practices from the design stage and by default?
• How to conduct data protection impact assessments (DPIAs)?
• How to report data breaches to the relevant supervisory authority?
• What is the role of the data protection officer (DPO)?
• How to perform international data transfers?

 4. Enforcement and Penalties

• Who is a supervisory authority & where to find them?
• What are the penalties for not complaining to EU-GDPR?

Training Program Contents

Module 1 – Fundamentals of Data Privacy

1. Understanding Data Privacy
2. Purpose of Data Privacy
3. Why Does Data Privacy Matter
4. Need for Data Privacy Regulation
5. Privacy Regulation Worldwide
6. Data Privacy Principles
7. Data Privacy by Design & Default

Module 2 – GDPR Foundation

1. Understanding GDPR
2. The objectives of the GDPR
3. Who are subject to GDPR?
4. What type of data does GDPR address?
5. How Does GDPR Affect other countries outside EU?
6. What happens when companies fail to comply with GDPR?
7. What are GDPR articles & recitals?
8. Who does the GDPR apply to?
9. What is personal data?
10. What is special category of personal data?

Module 3 – GDPR critical Roles

1. The Controllers & Processors
2. The Data Protection Officer (DPO)

Module 4 – GDPR Principles

1. The seven key principles of GDPR
2. Lawfulness, Fairness & Transparency
3. Purpose Limitation
4. Data Minimization
5. Data Accuracy
6. Storage Limitation
7. Integrity & Confidentiality
8. Accountability

Module 5 – GDPR Individual Rights

1. The eight Individual Rights of GDPR
2. Right to be Informed
3. Right of Access
4. Right to Rectification
5. Right to Erasure
6. Right to Restrict processing
7. Right to Portability
8. Right to Object
9. Rights in relation to Automated Decision making & Profiling

Module 6 – GDPR Consent

1. What is Consent?
2. Obtaining, Recording & Managing consent

Module 7 – Personal Data Breach & International Transfers

1. What is Personal data breach?
2. Reporting Personal data breach
3. What are international transfers?

Module 8 – GDPR & BREXIT

1. Relevance of GDPR & BREXIT

Module 9 – Operationalizing GDPR

1. Identifying the Business Process
2. Identifying data privacy champions
3. Conducting data discovery (data mapping/data inventory)
4. Categorizing Controllers & Processors
5. Establishing the Record of Processing Activity (RoPA)
6. Establishing data subject access request
7. Conducting Data Protection Impact Assessment (DPIA)