Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Fundamental Principles of Personal Data Processing
- National and international legal frameworks
- Applicability scope of personal data protection statutes
- Jurisdiction and authority of the data protection body
- Judicial mechanisms for safeguarding personal data rights
- GDPR: Core provisions, definitions, and key considerations
- Sector-specific regulatory requirements under the GDPR
- Definition and classification of personal data
- Processes involved in personal data handling
- Statutory grounds for the lawful processing of personal data
- Obligations of the data controller
- Entitlements of data subjects
- Regulatory sanctions and administrative penalties
- Personal Data Protection Act of 10 May 2018: Regulatory scope
- Designation of a Data Protection Officer (DPO)
- Proceedings regarding violations of data protection laws
- Oversight of adherence to data protection regulations
- Civil, criminal, and administrative liability
- Conditions for the lawful processing of standard and sensitive data
- Legal prerequisites for outsourcing personal data processing to third parties
- Data Protection Impact Assessments (DPIA)
- Data protection by design and by default principles
- Legal foundations for cross-border transfers of personal data
- Safeguarding personal data within employment contexts
Designation of a Data Protection Officer
- Mandatory appointment requirements for a Data Protection Officer
- Voluntary designation of a Privacy Supervisor
Eligibility of Data Protection Officers
- Qualifications required to serve as a Privacy Supervisor
- Employment structure and engagement of the Privacy Supervisor
Role and Status of the Data Protection Officer
- Direct reporting lines for the Privacy Supervisor to senior leadership
- Provision of administrative support to the Privacy Supervisor
- Participation of the Privacy Supervisor in all data protection matters
- Prohibition on directing the Privacy Supervisor’s performance of duties
- Mitigation of conflicts of interest and the Privacy Supervisor’s role
- Protections against dismissal or disciplinary action against the Privacy Supervisor
- The Privacy Supervisor’s obligation to maintain confidentiality
Information Security Governance
- Analysis of organizational security management systems in light of relevant standards
- Identification of privacy risks and associated legal consequences
- Methodologies for risk assessment and evaluating the effectiveness of security controls
- Implementation of a risk-based approach: Practical application of risk analysis templates
- Management of the Personal Data Lifecycle
Execution of Data Protection Officer (DPO) Duties
- Statutory basis for appointing a DPO
- Entities required to appoint a DPO and procedures for such appointment
- DPO standing and necessary professional qualifications
- Scope of DPO responsibilities and planning for their execution
- Reporting on data processing compliance in both traditional and IT environments
- Documentation of activities performed by the DPO
- Preparation of audit and inspection reports
- Protocols for overseeing personal data processing records
- Authority of the data protection office in relation to DPOs
Operational Guidelines for Data Protection Inspections
- Expectations of the regulatory authority toward audited entities
- Preparation strategies for regulatory inspections
- Illustrative case analysis
Practical Application Modules
- Drafting a model Information Security Policy
- Formulating administrative directives
- Compiling a Record of Processing Activities
- Preparation of essential personal data protection documentation
- Case study application
- Common errors in the creation of compliance documentation
Supplementary Resources for Participants:
Reference Forms and Templates:
- Consent forms for image usage and distribution
- Event and newsletter subscription entries
- Consent for commercial outreach
- Protocols for sending offer-related emails
- Protocols for general correspondence
- Exemplary personal data protection policy
- GDPR-compliant information obligation templates and instructions
- Risk assessment template
- Register of personal data processing activities template
- Register of processing activity categories template
- GDPR breach register template
- GDPR compliance checklist template
- Procedures for responding to personal data protection violations
- Data breach reporting template
- Register of security incidents and remedial actions
- Log of corrections to data records
- Log of data restorations
- Model correction documentation
- Restoration standard format
- Model objection form
- Model contract restricting further processing of personal data
- Sample consents for competitions, marketing, and publications
- Information obligations for transport services
- Information obligations for meeting monitoring
- Information obligations for recruitment processes
- Information obligations regarding tax authorities
- Information obligations under specific local regulations
- Information obligations under public procurement law
- Information obligations under labor law
- Tax-related information obligations
- Employee authorization for personal data processing: Template with examples
- Template for notifying data subjects of a breach
- Personal Data Processing Agreement for Controllers template
- Personal Data Processing Agreement for Processors
- Additional relevant documentation
Requirements
Target Audience
- Professionals beginning their tenure as Data Protection Officers
- Individuals expected to be appointed to this role in the near future
Testimonials (1)
The variety of the information shared and the clarity to explain terms in plain English.
