Description
The GDPR Foundation: Regulation (EU) 2016/679 and compliance requirements course (Foundation level) provides the basics of personal data protection: the regulatory framework, principles and legal bases, data subject rights, privacy notices and consent, the record of processing activities, the parties involved in processing and accountability.
Taught by Dott.ssa Valentina Grazia Sapuppo, the course is delivered live, online or in person. It is the starting point for the courses that prepare for certification of the UNI 11697:2017 professional profiles.
Main topics
| āGDPR and Italian Privacy Code | āPersonal data and special categories |
| āPrinciples and legal bases | āData subject rights |
| āPrivacy notices and consent | āRecord of processing activities |
| āParties involved in processing | āAccountability, DPIA and data breaches |
Course programme
| 01 | The regulatory framework: Regulation (EU) 2016/679 and the Italian Privacy Code (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018); personal data and special categories of data |
| 02 | The principles (Art. 5) and legal bases for processing; data subjects and their rights (Arts. 12-22) and handling requests to exercise them |
| 03 | Privacy notices and consent (with ISO/IEC 29184 as a reference), the record of processing activities and the parties involved: controller, joint controller, processor (Art. 28), persons authorised to process (Art. 29) |
| 04 | Accountability in practice: privacy by design and by default, risk analysis and DPIA in brief, data breach management and notification, role and tasks of the DPO |
The programme is complemented by self-assessment quizzes to check learning.
No specific knowledge, experience or digital skills are required. The Awareness level Privacy and GDPR course is recommended.
Methodology and materials
Certificate of attendance
A certificate of attendance is issued at the end of the course.
