Build a practical understanding of privacy and data protection in today’s digital workplace.
This course introduces the fundamental concepts of privacy, personal data protection, GDPR, and organizational responsibilities, providing the knowledge needed to recognise privacy obligations and handle personal data appropriately in day-to-day business activities.
- Why get trained: Learn the fundamentals of privacy and data protection, understand GDPR principles, identify personal data and data subject rights, recognise lawful processing requirements, understand organizational responsibilities, and apply basic privacy practices when handling personal information.
- Why it matters: Personal data is processed across almost every business function. A basic understanding of privacy principles helps employees recognise compliance requirements, reduce the risk of inappropriate data handling, and support organizational efforts to protect personal information and meet regulatory obligations.
- Who should attend: Business professionals, administrative staff, HR personnel, customer service representatives, sales professionals, project team members, compliance support staff, and employees who work with or have access to personal data as part of their daily responsibilities. The certification is designed for anyone who needs a basic understanding of GDPR and personal data protection.
Develop a practical understanding of privacy and data protection principles that support responsible handling of personal data across the organization. HRD Corp Claimable.
Overview
EXIN Privacy & Data Protection Essentials (PDPE) is a certification that validates a professional’s knowledge about organizing the protection of personal data, the EU rules and regulations regarding data protection.
Wherever personal data is collected, stored, used, and finally deleted or destroyed, privacy concerns arise. With the EU General Data Protection Regulation (GDPR) the Council of the European Union aims to strengthen and unify data protection for all individuals within the European Union (EU). This regulation affects every organization that processes personal data of EU citizens. The EXIN Privacy & Data Protection Essentials certification covers the main subjects related to the GDPR, which should be known by everyone working with personal data.
The new standard in the ISO/IEC 27000 series: ISO/IEC 27701:2019 Security Techniques – Extension to ISO/IEC 27001 and ISO/IEC 27002 for Privacy Information Management – Requirements and Guidelines is useful for organizations that want to show compliance with the GDPR. The content of the new ISO standard helps fulfill the GDPR obligations to organizations regarding the processing of personal data.
Neither the GDPR nor the ISO standard are exam literature. However, the literature matrix in Chapter 4 is designed to show the link between the exam requirements, the literature, the GDPR and the ISO/IEC 27701:2019 standard to give the certification a broader context.
Skills Covered
- Privacy and data protection fundamentals & regulation
- Organizing data protection
- Practice of data protection
Prerequisites
No prerequisites required
Target Audience
Everyone who wants or needs to have a basic understanding of data protection and European legal requirements as defined in the GDPR. The Essentials exam is tailored for everyone who needs to make informed decisions regarding the processing of or protection of personal data.
Module 1: Privacy & Data Protection Fundamentals and Regulations
- Define privacy
- Relate privacy to personal data and data protection
- Personal data according to the GDPR
- The data subject’s rights regarding personal data
- List the roles, responsibilities, and stakeholders in the GDPR
- Six legitimate grounds for processing
- The concept of purpose limitation
- Proportionality and subsidiarity
- The requirements for legitimate data processing
- The purpose of personal data processing
- The right to be forgotten
- The concept of personal data breach
Module 2: Organizing Data Protection
- What activities are required to comply with the GDPR
- Data protection by design and by default
- Personal data breach notification obligation as laid down in the GDPR
- The general responsibilities of a supervisory authority
- The concept of binding corporate rules (BCR)
- Data protection is formalized in contracts between the controller and the processor
Module 3: Practice of Data Protection
- The benefits of data protection by design and by default
- Outline what a DPIA covers and when to do a DPIA
- The purpose of data lifecycle management (DLM)
- What a cookie is and what its purpose is
- The right to object to the processing of personal data for the purpose of direct marketing, including profiling
Dates & Locations
Exam & Certification
EXIN Privacy & Data Protection Essentials
EXIN Privacy & Data Protection Essentials (PDPE) is a certification that validates a professional’s knowledge about organizing the protection of personal data, the EU rules and regulations regarding data protection.
Training & Certification Guide
Frequently Asked Questions
Speak to a Training Consultant
All courses are HRD Claimable.
Get in touch with our team via the form or WhatsApp us on +6011-5119 6631
