1

The fundamentals of privacy

• Introduction to data protection.
• The GDPR (General Data Protection Regulation).
• The DPO (Data Protection Officer).

2

Introduction to the GDPR and privacy principles

• Regulatory framework.
• Fundamentals of personal data protection.
• General Data Protection Regulation.
• EU bodies: International Working Group for Personal Data Protection in Telecommunications (IWGDPT).
• Supervisory authorities, Article 29 Working Party.
• Legislation: Legal framework, consent, special categories of personal data

3

The DPO (Data Protection Officer).

• Appointment, function, responsibilities, missions.
• Internet governance, cyber-rights, and international data transfers.
• Legislation and systems around the world.
• DPO working across the company: Collaborating with the legal, marketing, IT, and purchasing teams.

4

Risk management and information security

• Risk management: Concepts, risk management, methodologies, standards, monitoring.
• Information Systems and security: Duties and responsibilities, training and awareness-building, classification.
• Access, exposure, cryptography, and digital signatures.
• Mobile security and Big Data (concept, NoSQL and applications).
• Internet of things: Concepts, models and principles, applications, threats.
• New technologies, new threats.

5

Incidents and protection

• Management: information security incident, event.
• Business continuity: recovery, time, strategy.
• Assessing the impact on data protection.
• Personal data lifecycle.

6

Certification exam

• Paper exam with 12 open-ended questions, to be taken in 3 hours.
• The exam is open-book (you may use course materials and personal notes taken during the session).