GDPR Data Privacy Professional

GDPR training course is delivered by Privacy Expert, PhD and LLM - Louis-Philippe Gratton. Designed for legal and information security professionals, executives and managers, as well as for data protection officer candidates.
from 25 February to 28 February2020
09:00-16:00
500
EUR
450
EUR
Early bird price (until 11 February)
Online

Trained by us

Description

  • Your partner asked “Are you GDPR compliant?
  • You suspect that you may violate the Regulation, and face a 20 million fine, but you are not sure?
  • You want to make sure to take the right steps in data protection?
  • Your app faces removal from the Google Play Market or the App Store?
  • You received a request to delete data?

These and other situations are a sign that it is time to take the GDPR seriously, but here is the problem:

You started reading the Regulation, and nothing is clear. So many articles and recitals written in a complex language. So you do not know where to start, and you do not know exactly what to do in your organization.

In addition, you do not have 2-3 years to understand all the nuances of the Regulation, explanations of numerous supervisory bodies, and judicial precedents.

Our course will help you:

  • Get answers to all these and many other questions;
  • Save years of self-study;
  • Start navigating the Regulation, and understanding the whole system;
  • Understand what specific measures need to be done in your organization;
  • Take the first steps in a new profession - Data Privacy Professional!
More
Hide

For which companies?

Inside and outside the EU the following organizations, working with personal data of people based in the EU, shall comply with the new GDPR:

  • Apps and cloud solutions;
  • Outsourcing companies in IT;
  • E-shops;
  • Social networks;
  • Banks;
  • Medical and pharmaceutical companies;
  • Event agencies.

Who needs this course?

  1. Information security, business continuity and risk-management professionals who need to carry out their tasks in accordance with Articles 32 and 35 of the GDPR, e.g. implementing encryption, pseudonymization, or incident management.
  2. Lawyers and Compliance Officers who need to choose a lawful basis for data processing according to Article 6 of the GDPR, determine terms of storage (Article 5), joint controllers and processors using a Data Processing Agreement (Articles 26 and 28), write a privacy policy (Articles 13 and 14), initiate transfers of personal data (Articles 44 and 46).
  3. Business owners who need to change internal processes according to Article 5 of the GDPR, conduct a risk assessment (Article 35), designate a Data Protection Officer (Articles 37-39), form a project team (working group) to implement the GDPR or check an external consultant.
  4. System architects, designers, developers, or testers who need to fulfill privacy by design requirements according to Article 25 of the GDPR, e.g. minimize stored data, limit data retention, implement privacy by default, etc.
  5. HRs who also need to spread the new data protection policies requirements among employees and to follow GDPR rules themselves. They process personal data during recruitment, training, employee relations, payroll, benefits and other processes.
  1. Marketers and sales managers who deal with e-marketing and follow-up letters, push notifications, chatbots, cold calling, remarketing and retargeting, promotions, lead gen, etc. and need to have a lawful basis for all of these processes according to Article 5 of the GDPR, valid consent (Article 7), non-sensitive data (Article 9), and to provide the data subjects with all required information (Articles 13 and 14).
  2. Contact center staff who may face data subjects requests and need to distinguish types of requests, forward them to a privacy officer or to respond to them in accordance with Articles 15-22 of the GDPR. For instance, they need to provide the data subject with his/her data after proper identification process.
  3. Technical support and IT-infrastructure divisions who deal with Records of Processing Activities in accordance with Article 30 of the GDPR and need to tackle automatic data deletion and reservation (Articles 5, 25 and 32).
  4. Risk management divisions and financial departments who need to know how to budget the GDPR implementation next year (trainings, new employees, consulting services, software, fines) according to Articles 24 and 28 of the GDPR.
  5. Consultants in the field of personal data protection, information security and law who need to apply the provisions of the Regulation and to help their clients with any requests related to the GDPR. And make it without causing harm, of course!
More
Hide

Why should I choose this training?

The only regular course in CIS region
Relevant DPA's guidelines
500+ graduates
A real opportunity to become a DPO
Diagrams, flowcharts, practical exercises in mini-groups
No legal or technical background required

Trainer

луи-филипп-removebg-preview
Louis-Philippe Gratton PhD, LLM
Privacy Expert
Academic, lawyer (Québec Bar), Ph.D. (France), LL.M. (Canada and Switzerland). Worked in Canada, France, and Switzerland, including as a consultant on comparative privacy law for the Department of Justice of Québec. Fluent in French and English.
Siarhei Varankevich CIPP/E, CIPM, MBA
Siarhei Varankevich CIPP/E, CIPM, MBA
Certified Information Privacy Professional / Europe (CIPP/E) certification MBA IGC Bremen University of Applied Sciences Certified Information Privacy Manager (CIPM) certification
Co-Founder & CEO of Data Privacy Office LLC. Data Protection Trainer and Principal Consultant
MBA, Certified Information Privacy Professional (CIPP/E), Certified Information Privacy Manager (CIPM). Started to work with the GDPR draft version, in 2015, in Munich. Defended his MBA thesis about the Regulation, in Bremen, in 2016
Privacy Expert
Academic, lawyer (Québec Bar), Ph.D. (France), LL.M. (Canada and Switzerland). Worked in Canada, France, and Switzerland, including as a consultant on comparative privacy law for the Department of Justice of Québec. Fluent in French and English.
Siarhei Varankevich CIPP/E, CIPM, MBA
Co-Founder & CEO of Data Privacy Office LLC. Data Protection Trainer and Principal Consultant
MBA, Certified Information Privacy Professional (CIPP/E), Certified Information Privacy Manager (CIPM). Started to work with the GDPR draft version, in 2015, in Munich. Defended his MBA thesis about the Regulation, in Bremen, in 2016

Siarhei delivered hundreds of consultations on GDPR issues to companies around the world. He helped to implement the GDPR program as an external project manager in over 50 companies.

In LinkedIn

Guest Expert

If they are available, we can invite one of these experts to cover a highly specialized topic.

Sergei Tchernyshenko CIPT, GDPR DPP
Sergei Tchernyshenko CIPT, GDPR DPP
Certified Information Privacy Technologist CIPT GDPR Data Privacy Professional (GDPR DPP)
Trainer in data protection technology and information security management
Certified Information Privacy Technologist (CIPT), GDPR Data Privacy Professional (GDPR DPP). Professional in the field of IT infrastructure, information security, risk management, and business continuity. Chief Information & Data Protection Officer, and member of the Directors Council at Intetics Inc.
Olga Zavalniuk CIPP/E, CIPP/US
Olga Zavalniuk CIPP/E, CIPP/US
Certified Information Privacy Professional / Europe (CIPP/E) certification Certified Information Privacy Professional / США (CIPP/US) certification GDPR Data Privacy Professional (GDPR DPP)
Senior Consultant DPO LLC, Data Protection Officer
Expert in Data Privacy, Certified Information Privacy Professional (CIPP/E & CIPP/US - Europe & United States), member of International Association of Privacy Professionals (IAPP)
Georg Philip Krog Cand. Jurd., LLM
Georg Philip Krog Cand.jur., LLM

Co-Founder of Signatu, Chief Legal Counsel, Cand.jur. and LL.M. Past: Researcher at the Faculty of Law, in Oslo, and Max Planck Institut, in Hamburg, and Fulbright Scholar at Harvard Law School and Stanford Law School
Sergei Tchernyshenko CIPT, GDPR DPP
Trainer in data protection technology and information security management
Certified Information Privacy Technologist (CIPT), GDPR Data Privacy Professional (GDPR DPP). Professional in the field of IT infrastructure, information security, risk management, and business continuity. Chief Information & Data Protection Officer, and member of the Directors Council at Intetics Inc.

Member of the International Association of Privacy Professionals (IAPP)

Olga Zavalniuk CIPP/E, CIPP/US
Senior Consultant DPO LLC, Data Protection Officer
Expert in Data Privacy, Certified Information Privacy Professional (CIPP/E & CIPP/US - Europe & United States), member of International Association of Privacy Professionals (IAPP)

Olga provides consulting services, as well as external DPO support. Her practical experience in implementing the principles and concepts of personal data protection into day-to-day business acquired in the United States and subsequent work with European and former-USSR companies allows her to find solutions for a wide spectrum of clients.

Georg Philip Krog Cand. Jurd., LLM
Georg Philip Krog Cand.jur., LLM
Co-Founder of Signatu, Chief Legal Counsel, Cand.jur. and LL.M. Past: Researcher at the Faculty of Law, in Oslo, and Max Planck Institut, in Hamburg, and Fulbright Scholar at Harvard Law School and Stanford Law School

Program

Click on"" to see details.

PRIVACY
The definition of privacy, information privacy and data protection. Types of information privacy
History of data privacy
Taxonomy of privacy by Daniel Solove
Social role of data privacy
Data protection law evolution overview
LAW
Data protection law acts, standards and regulations which are in force
Data privacy cases, precedents, guidelines
The Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data №108
EU Directive 96/46
OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data
EU members data protection law overview
GDPR
EU current data protection regulatory framework (GDPR+) overview
EU GDPR history
GDPR territorial and material scope
GDPR text structure (recitals, business related articles ect.)
GDPR related acts overview
Cases and precedents
Article 29 Working Group (Art29WP) and European Data Protection Board (EDPB) guidelines and opinions
National supervisory authorities (SAs) guidelines
Mapping of the Belarusian, Ukrainian and Russian data protection laws to the rules applicable in EU
Overview of risks, fines, responsibilities related to personal data processing
CONCEPT OF PERSONAL DATA
The concepts of personal data (PD), identifier, data subject
Biometric data
Formula of Persomal Data "(id-x)+info"
Cases of (non-)personal data
DATA PROCESSING. DATA CONTROLLERS AND PROCESSORS
Data processing and types of processing.
Profiling
Personal data anonymisation and pseudonymisation
Processing of special categories of personal data
Processing of children data
Data controller, joint controllers or separate controllers
Data processor
Responsibilities distribution between data controllers and processors
GDPR PRINCIPLES
Lawfulness and fairness of processing
Transparency of processing
Purpose limitation
Data minimisation
Storage limitation
Data accuracy
Integrity and confidentiality
Accountability
LAWFUL BASIS FOR PROCESSING
Review of six lawful bases for processing
Consent
Conditions for consent
Getting consent in UX
Contract
Legal obligation
Vital interest
Public interest
Legitimate interest
Balancing test of Legitimate Interest Assessment (LIA)
DATA SUBJECT RIGHTS
Modalities for exercise of the rights of the data subject
Right to access personal data
Right to rectification
Right to restriction of processing
Right to be forgotten (right to erasure)
Right to data portability
Right to object
Right to not be subject of automated decision-making
Data subject rights restriction
Nightmare letter from data subject case
DPIA AND PRIVACY RISK MANAGEMENT
Check-box approach vs risk based approach
Concept of risk
Risk likelihood and severity
GDPR terminology related to risks (high risk, likely etc.)
Data Protection Impact Assessment (DPIA) requirements
When you need DPIA
BIA (Business Impact Assessment) or SIA (Security Impact Assessment) as triggers for DPIA
Describing processing operations, personal data and supporting assets
Legal and risk-treatment controls
Risk sources, feared events, threats and risks
DPIA tools
INFORMATION SECURITY
GDPR requirements
Data breach notification of supervisory authorities and data subjects
Technical and organisational measures of managing information security risks
TRANS-BORDER TRANSFERS OF PERSONAL DATA
GDPR data transfers rules overview
Data transfers documenting
Data Processing Agreement (DPA)
Binding Corporate Rules (BCR)
Standard Contractual Clauses (SCC)
Codes of conduct and certifications
Data transfers derogations for specific situations
PRIVACY BY DESIGN
"Privacy by Design. The 7 foundational principles" by Ann Cavoukian review
Privacy by Default
Embeded Privacy
Full functionality - positive-sum
End-to-End Security - Lifecycle Protection
Data Protection Officer (DPO) and EU representative
Representative in EU
Data Protection Officer

Training format

4 full training days lasting 8 academic hours
8 practical exercises
32 real cases
4 color schemes
700 additional materials
87 test questions
1 GDPR DPP certificate for anyone, who passed the test

After the course you will be able to answer the following questions

privacy student
What is privacy?
How to define personal data under the GDPR?
privacy student
privacy student
What legal ground is necessary for collection of personal data and how long you can store it?
Who, how and when should be designated as Data Protection Officer?
privacy student
privacy student
How is risk assessment (DPIA) carried out?
What shall you write in your Privacy policy?
privacy student
privacy student
What should you do in case of data breaches?

Online format

We use Zoom to organize the training. You can see the trainer and his screen, as well as ask him questions in real time using a mic or a webcam.

We will share with you an invitation link through a group chat in Telegram or WhatsApp.

Traditionally, the course is given from 9:00 to 16:00, with coffee breaks and a long lunch break from 12:00 to 13:00.

Technical requirements:

- mic and headphones;

- Internet connection for high-quality video call;

- Zoom app.

For maximum benefit, we recommend that you dedicate these days exclusively for the training.

More
Hide

Hurry up!

Standard fee:
500 EUR *
Early bird:
450 EUR *
Save 100 BYN today!
*Minus VAT.

00


days

00


hours

00


minutes

00


seconds

before the early bird ends!

Certificate on completion

Certificate in English. Attachment to certificate include the course program. Training is an organizational measure, and is a duty reflected in the General Data Protection Regulation, Articles 24, 25, 28, 32 and 39.

Sample Certificate GDPR Data Privacy Professional - GDPR DPP
DPO Club - сообщество профессионалов в области защиты персональных данных

DPO Club membership

In case of successful completion of the course, you can join the DPO Club, a closed information privacy professionals community. General online meetings takes place every month. You can share your own experience and discuss the latest trends with other members at these meetings. There are more than 150 club members now. Our numbers grow stronger by the day!

Feedback

Details

Venue
This is an online course, so you can participate from all over the world!

Apply

Sign up