This course employs a methodology focused on practical workshops that will be moderated by practitioners in the field. The workshops will use various simulations that will allow you to learn by doing.

What will you learn:

How to deal with controllers’ expectations and manage diverging objectives in the business environment (stakeholder management);
How to ensure data protection by design and by default in a fast-changing digital and legal environment;
How to assess data protection compliance and how it is interlinked with IT security;
Risk analysis and management;
How to assess issues related to personal data transfers;
What actions to take in case of personal data breaches;
How to implement controls;
The tasks and responsibilities of the DPO;
How to audit an ICT provider;
The difference between anonymisation, pseudo-anonymisation and encryption;
How to conduct a data protection impact assessment;
What is a data processing agreement and its practical implications;
How to counter opposition from the rest of the organisation – a view from the DPO perspective;
How to ensure data protection compliant migration to a cloud computing service provider;
How to draft a data breach protocol and effectively raise awareness;
How to act after a significant data breach, including audit and lessons learnt.