Privacy & Data Protection (GDPR / UK GDPR)

What you will be able to do

• You will be able to apply the GDPR principles and key definitions to classify processing activities correctly.
• You will be able to select and document an appropriate lawful basis for a given processing activity.
• You will be able to operate a data subject rights process and respond within statutory deadlines.
• You will be able to distinguish controllers from processors and identify the required terms in a data processing agreement.
• You will be able to screen for and carry out a Data Protection Impact Assessment using privacy-by-design thinking.
• You will be able to choose a valid international transfer mechanism and recognize when a transfer risk assessment is needed.
• You will be able to triage a personal data breach against the 72-hour notification rule and the risk-to-individuals test.
• You will be able to describe the role of the DPO and the main enforcement and penalty structure.

What is inside

4 modules, 8 lessons. Each module ends in a graded quiz and most carry an assignment.

1. 01

   Foundations: Definitions and Principles

   Establish the vocabulary every privacy program rests on and the seven principles that govern all processing. You will learn what counts as personal data, who the actors are, and how the principles translate into day-to-day decisions.

   2 lessons · 5 quiz questions

2. 02

   Lawful Bases and Data Subject Rights

   Learn the six lawful bases, how to pick and document the right one, and the special conditions for sensitive data. Then operate the data subject rights process end to end, including deadlines and refusals.

   2 lessons · 5 quiz questions · assignment

3. 03

   Controllers, Processors, DPIAs and Privacy by Design

   Master the controller/processor relationship and the contract that must govern it, then learn how to screen for and run a DPIA grounded in privacy-by-design thinking.

   2 lessons · 5 quiz questions

4. 04

   International Transfers, Breaches and Enforcement

   Cover how to move personal data across borders lawfully, how to triage and notify a breach against the 72-hour rule, and the roles of the DPO and supervisory authorities in enforcement.

   2 lessons · 5 quiz questions · assignment