Data Privacy & Protection
Overview
Personal data is valuable and sensitive, and mishandling it can bring legal penalties and loss of trust. This course covers data protection principles, international privacy laws, lawful processing, individuals' rights, security measures, breach handling and building a privacy programme.
Who should attend
Data protection officers, compliance, legal and IT staff, HR managers, and marketing professionals.
Training methodology
Interactive presentations, practical exercises, case studies, group discussions, role-plays where relevant, and a personal action plan that participants apply in their own work.
Objectives
By the end of this course, participants will be able to:
- Explain data protection principles and key laws
- Identify lawful bases for processing personal data
- Respond to individuals' rights requests
- Apply privacy by design and security measures
- Manage data breaches and a privacy programme
Course outline
Day 1Privacy Foundations
- Personal and sensitive data
- Data protection principles
- International and regional laws
- Roles: controller and processor
- Discussion
Day 2Lawful Processing
- Lawful bases
- Consent
- Data minimisation and retention
- Records of processing
- Exercise
Day 3Individuals' Rights
- Access and correction
- Erasure and objection
- Handling requests
- Transparency notices
- Case study
Day 4Privacy by Design and Security
- Privacy impact assessments
- Security measures
- Third parties and transfers
- Data in AI and analytics
- DPIA exercise
Day 5Breaches and Programme
- Breach response and notification
- Privacy governance
- Training and awareness
- Audit and monitoring
- Action plan
