Certificate in Data Protection Practice

In this popular certificate course, participants will be brought through the application of the law by experienced data protection practitioners and privacy consultants from private practice, the public sector, and from large multinationals. There is a strong focus on the GDPR and how to apply it in practice. This course will ensure that participants are equipped to deal with the compliance issues that arise in practice.

Modules

The programme is based on the following module scheme and covers key themes as listed below:

Module 1: Introduction to data protection law

• Origins of data protection law,
• Data protection concepts and principles,
• Overview of data protection landscape.

Module 2: Data processing and sharing

• Legitimate processing,
• Data retention,
• Data access requests,
• Government data, public sector,
• Data protection v freedom of Information,
• Litigation – legal professional privilege/discovery.

Module 3: Data processing and personal rights

• Removal, amendments, rectification,
• The right to be forgotten,
• Direct marketing,
• Automated decision making,
• State surveillance.

Module 4: General Data Protection Regulation (GDPR)

• Overview of key changes,
• Impact of changes on processing, consent, outsourcing,
• Compliance and enforcement,
• Requirement to have a data protection officer (DPO),
• Changes referenced in each module throughout the certificate.

Module 5: Data governance

• Role of the data protection officer,
• Data breaches,
• Powers of Data Protection Commission,
• Privacy impact assessments.

Module 6: International data transfers

• Data transfer risks,
• Transfers outside EEA,
• Effect of Brexit data transfers,
• Supervision, enforcement, offences.

Module 7: Data protection compliance

• CCTV,
• Direct marketing,
• Cookies, the Cloud,
• Outsourcing,
• Drones, biometrics, wearable technology.

Module 8: Data governance framework

• Best practice models,
• Information Asset Life Cycle,
• Aligning data protection and data governance,
• Standard frameworks and ISOs,
• Measuring date protection compliance.

Module 9: Change management

• Context and rationale,
• Principles of change management,
• Data protection training.

Module 10: Data security and technology

• Physical security of data,
• Virtual security of data,
• Technical considerations.

Module 11: Ethics in data protection

• Ethical first principles,
• A framework for ethics in information management,
• Practical application.

Module 12: Data protection update

• Global view and EU v US approach,
• Overview of recent data protection issues.

View course page