Description
The Privacy Specialist course (professional profile according to UNI 11697:2017) covers this profile in full with a technical and operational focus: from GDPR compliance to emerging technologies, with tools such as LIA, DPIA and TIA, the ISO/IEC 29151, 29184 and 31000 standards, and practical cases.
Taught by Dott.ssa Valentina Grazia Sapuppo, the course is delivered live, online or in person, and is supported by video pills, slides, summary sheets and quizzes that help participants study and prepare for the personal certification exam.
Main topics
| āGDPR compliance | āData subject rights |
| āConsent and privacy notices | āLIA, DPIA and TIA |
| āData breaches | āEmerging technologies |
| āEncryption and pseudonymisation | āISO/IEC 29151, 29184 and 31000 |
Course programme
| 01 | The Privacy Specialist profile according to UNI 11697:2017; the GDPR and the Italian Privacy Code (Legislative Decree 101/2018) |
| 02 | The core principles of the GDPR and the current digital regulatory landscape (NIS2, DORA, Data Act, DSA/DMA, AI Act) |
| 03 | Personal data; data subjects and their rights; handling requests to exercise rights |
| 04 | Consent; privacy notices and ISO/IEC 29184; online data collection |
| 05 | Identifying and processing personal data with ISO/IEC 29151; the record of processing activities |
| 06 | Legitimate Interest Assessment (LIA) and prior consultation (Art. 36) |
| 07 | Risk analysis with ISO/IEC 31000 and data protection impact assessment (DPIA) |
| 08 | Data breach management and notification; Transfer Impact Assessment (TIA) for transfers outside the EU |
| 09 | Emerging technologies and privacy: cloud, big data, IoT, blockchain, synthetic data and biometric data |
| 10 | Encryption, anonymisation and pseudonymisation; video surveillance and facial recognition |
| 11 | Information security and frameworks (ISO/IEC 29100, NIST CSF); drafting technical opinions |
| 12 | Key decisions of the Italian Garante and applied case studies (healthcare, finance) |
The programme is complemented by self-assessment quizzes and materials to prepare for the personal certification exam.
Basic knowledge of the GDPR (PRIV-FND course or equivalent). No previous experience, preparatory courses or specific digital skills are required.
Methodology and materials
Certificate of attendance
A certificate of attendance is issued at the end of the course.
