E-PDPE: EXIN Privacy and Data Protection Essentials

Module 1: Privacy & Data Protection Fundamentals and Regulations
1.1 Definitions

• Define privacy.
• Relate privacy to personal data and data protection.

1.2 Personal Data

• Personal data according to the GDPR.
• The data subject’s rights regarding personal data.
• List the roles, responsibilities and stakeholders in the GDPR.

1.3 Legitimate Grounds and Purpose Limitation

• Six legitimate grounds for processing.
• The concept of purpose limitation.
• Proportionality and subsidiarity.

1.4 Further Requirements for Legitimate Processing of Personal Data

• The requirements for legitimate data processing.
• The purpose of personal data processing.

1.5 Rights of Data Subjects

• The right to be forgotten.

1.6 Personal Data Breach and Related Procedures

• The concept of personal data breach.

Module 2: Organizing Data Protection
2.1 Importance of Data Protection for the Organization

• What activities are required to comply with the GDPR.
• Data protection by design and by default.
• Personal data breach notification obligation as laid down in the GDPR.

2.2 Supervisory Authority

• The general responsibilities of a supervisory authority.

2.3 Binding Corporate Rules and Data Protection in Contracts

• The concept of binding corporate rules (BCR).
• Data protection is formalized in contracts between the controller and the processor.

Module 3: Practice of Data Protection
3.1 Data Protection by Design and by Default

• The benefits of data protection by design and by default.

3.2 Data Protection Impact Assessment (DPIA)

• Outline what a DPIA covers and when to do a DPIA.

3.3 Personal Data in Use

• The purpose of data lifecycle management (DLM).
• What a cookie is and what its purpose is.
• The right to object to the processing of personal data for the purpose
  of direct marketing, including profiling.