Description
The Data Protection Officer course (professional profile according to UNI 11697:2017) trains DPOs with a focus on governance and accountability: the parties involved in processing, the privacy organisational model, relations with the authorities, risk management, DPIA, data breaches, internal audit and liability.
Taught by Dott.ssa Valentina Grazia Sapuppo, the course is delivered live, online or in person, and is supported by video pills, slides, summary sheets and quizzes that help participants study and prepare for the personal certification exam.
Main topics
| āDPO profile and tasks | āAccountability and privacy by design |
| āPrivacy organisational model | āRelations with the authorities |
| āRisk management and DPIA | āData breaches |
| āInternal privacy audit | āLiability and sanctions |
Course programme
| 01 | The DPO profile according to UNI 11697:2017: appointment, tasks, independence and communication skills |
| 02 | The parties involved in processing: controller, joint controller, processor (Art. 28) and persons authorised to process (Art. 29) |
| 03 | Responsibility and accountability; privacy by design and by default |
| 04 | Data processing in the company: policies, procedures and development of the privacy organisational model |
| 05 | Project management and privacy governance strategies |
| 06 | Cooperation with the supervisory authority; the Italian Garante: role, functions and powers |
| 07 | The European framework: European Data Protection Board (EDPB) and European Data Protection Supervisor (EDPS) |
| 08 | Risk management and information security; the ISO/IEC 29100 privacy framework |
| 09 | Data protection impact assessment (DPIA), LIA and data breach management from the DPO’s perspective |
| 10 | Vulnerability and business continuity; Art. 28 and system administrators |
| 11 | Internal privacy audit and management review; records of processing activities |
| 12 | Liability and sanctions; the Model 231 and its relationship with privacy |
The programme is complemented by self-assessment quizzes and materials to prepare for the personal certification exam.
Knowledge of the GDPR (PRIV-FND course or equivalent). Experience in compliance or legal roles is helpful. No preparatory courses or specific digital skills are required.
Methodology and materials
Certificate of attendance
A certificate of attendance is issued at the end of the course.
