Privacy & Data Protection Practitioner + examen [PDPP-EXIN]

OVERVIEW

With the ever increasing explosion of information flooding the internet, every company needs to plan how to manage and protect privacy of persons and their data. Not without a reason, many new laws - in the EU as well as in the USA and many other regions - are being formed in order to regulate both. The European Commission has just published the EU General Data Protection Regulation (GDPR), meaning that all organizations concerned need to comply with specific rules. This Practitioner certification builds on the subjects covered by the Foundation exam by focusing on the development and implementation of policies and procedures in order to comply with existing and new legislation, application of privacy and data protection guidelines and best practices, and by establishing a Data and Privacy Protection Management System.

OBJECTIVES

The student understands

• the purpose of the data protection/privacy policies within an organization
• data protection by design and by default
• the roles of the controller and processor
• the role and responsibilities of a data protection officer (DPO)

The student can apply

• the phases of the Data Protection Management System (DPMS)
• the theory of an action plan for data protection awareness
• the criteria for a data protection impact analysis (DPIA)
• the steps of a data protection impact analysis (DPIA)
• the GDPR requirements with regard to the personal data breaches
• the requirements for notification

AUDIENCE

This Practitioner level certification will be particularly useful to Data Protection Officers (DPOs) / Privacy Officers, Legal / Compliance Officers, Security Officers, Business Continuity Managers, Data Controllers, Data Protection Auditors (internal and external), Privacy Analyst and HR managers.

CERTIFICATION

The exam will be taken at the end of the course.

Exam Specification:

• Duration:2 hours
• Number of questions:40 (Multiple Choice)
• Pass mark:65%
• Open book:No
• Electronic equipment allowed:No
• Level:Advanced
• Successful completion of the Practical Assignments during course is mandatory

The exam cost is included in the course fee.

 

CONTENT

Data protection policies

• Purpose of the data protection/privacy policies within an organization
• Data protection by design and by default

Managing and organizing data protection

• Phases of the Data Protection Management System (DPMS)
• Action plan for data protection awareness

Roles of the Controller, Processor and Data Protection Officer (DPO)

• Roles of the controller and processor
• Role and responsibilities of a DPO

Data Protection Impact Assessment (DPIA)

• Criteria of a DPIA
• Steps of a DPIA

Data breaches, notification and incident response

• GDPR requirements with regard to personal data breaches
• Requirements for notification

Practical Assignments

Sample Exam