GDPR Foundation: Regulation (EU) 2016/679 and compliance requirements Course

250,00 € iva esclusa

An 8-hour course based on the GDPR (Regulation EU 2016/679) that provides the fundamentals of personal data protection: principles, legal bases, rights, the record of processing activities and accountability. The programme lays the groundwork for anyone handling personal data in the company and for the courses that prepare for certification of the UNI 11697:2017 professional profiles.

Description

The GDPR Foundation: Regulation (EU) 2016/679 and compliance requirements course (Foundation level) provides the basics of personal data protection: the regulatory framework, principles and legal bases, data subject rights, privacy notices and consent, the record of processing activities, the parties involved in processing and accountability.

Taught by Dott.ssa Valentina Grazia Sapuppo, the course is delivered live, online or in person. It is the starting point for the courses that prepare for certification of the UNI 11697:2017 professional profiles.

8
Hours
4
Modules
1
Lesson
Live
Synchronous
Course information
Instructor
Dott.ssa Valentina Grazia Sapuppo
Level
Foundation
Training area
ICT
Delivery
Synchronous, online or in person
Schedule
Shared upon enrolment
Participants
Classes of 8 to 25 participants
Who it is for
  • Privacy contacts
  • HR, IT, legal and marketing functions
  • Department managers
  • Anyone who handles personal data on behalf of the organisation
Objectives and expected outcomes

The course provides the GDPR fundamentals needed to handle personal data correctly in the company and to progress towards the privacy professional profiles.

By the end of the course, participants will:

  • understand the regulatory framework, the GDPR and the Italian Privacy Code, and distinguish personal data from special categories of data;
  • apply the principles of Art. 5 and identify the correct legal basis for each processing activity;
  • handle requests to exercise data subject rights (Arts. 12-22);
  • set up privacy notices, consent and the record of processing activities, and recognise the roles of controller, joint controller, processor and authorised person;
  • understand the accountability tools: privacy by design and by default, DPIA, data breach management and the role of the DPO.

Main topics

ā—GDPR and Italian Privacy Code ā—Personal data and special categories
ā—Principles and legal bases ā—Data subject rights
ā—Privacy notices and consent ā—Record of processing activities
ā—Parties involved in processing ā—Accountability, DPIA and data breaches

Course programme

01 The regulatory framework: Regulation (EU) 2016/679 and the Italian Privacy Code (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018); personal data and special categories of data
02 The principles (Art. 5) and legal bases for processing; data subjects and their rights (Arts. 12-22) and handling requests to exercise them
03 Privacy notices and consent (with ISO/IEC 29184 as a reference), the record of processing activities and the parties involved: controller, joint controller, processor (Art. 28), persons authorised to process (Art. 29)
04 Accountability in practice: privacy by design and by default, risk analysis and DPIA in brief, data breach management and notification, role and tasks of the DPO

The programme is complemented by self-assessment quizzes to check learning.

Prerequisites

No specific knowledge, experience or digital skills are required. The Awareness level Privacy and GDPR course is recommended.

Methodology and materials

Slides
The course slides, available for participants to download.
Summary cards
A summary card for each module with the key concepts.
Glossary
The essential terms of personal data protection.
Self-assessment quizzes
Quizzes to check your understanding of the content independently.

Certificate of attendance

A certificate of attendance is issued at the end of the course.