General Data Protection Regulation (GDPR) Foundation and Practitioner

On this accelerated 4-day GDPR Foundation and Practitioner course you'll cover the regulation itself and learn how your organisation can meet the strict requirements of GDPR.

You'll study the General Data Protection Regulation [(EU) 2016/679] and how it supersedes current data protection and privacy legislation in Europe and elsewhere. You'll also understand multi-jurisdictional consequences for the collection, retention and processing of Personal Data.

This accelerated Foundation and Practitioner course is 25% faster than traditional GDPR training. In four days, your expert instructor will equip you with the practical know-how to apply GDPR in the real world, immersing you in hands-on individual and group exercises. During the course you'll cover key topics including:

• Overview of legal systems and their interrelationships
• Updating your privacy notices for websites, email, cookies, etc.
• Privacy by design - exploring the specific purpose you process personal data for
• Embedding GDPR within organisations under common law, civil law and other legal systems
• Major required changes in corporate governance standards and processes
• Subtle effects of ‚Big Data‚;
• How to succeed under the self-reporting model of GDPR

You'll also discover what the integrated Personal Data environment would look like in your organisation. You'll then be able to develop, integrate and manage the changes required by GDPR in your organisation's governance, business and data processing.

This GDPR training also includes the GDPR Foundation and Practitioner exams, which you'll take on-site during your accelerated course.

Firebrand's GDPR training is designed for professionals with a practical need to understand and implement enterprise governance and business processes. This accelerated course is ideal for:

• Senior executives responsible for process and governance
• Contractors wishing to capitalise on this new area of process
• Governance, risk and compliance (GRC) practitioners
• Lawyers wishing to understand the whole context of GDPR
• Data privacy, security and compliance consultants
• Auditors, risk and compliance practitioners

Ensure your business can conform to the requirements of GDPR with this accelerated 3-day GDPR training. Breaches of EU regulation by multinationals can result in fines upwards of £20 million and could be as high as 4% of worldwide gross turnover.

On the GDPR Foundation section of this accelerated course, you‚ll cover the following topics:

• Updating your privacy notices for websites, email, cookies, etc.
• Relevance to you and definitions of personal data and special categories like health & children
• Privacy by design / default - think about what specific purpose you process personal data for
• Pathways - documenting the legal basis for each purpose
• Data Protection Officer (DPO) v the data protection function
• Formats for conducting your own Privacy Impact Assessments
• Q&A including relevance of Brexit

On the GDPR Practitioner section of this accelerated course, you‚ll cover the following topics:

• Foundations of Modern Privacy Law
• GDPR Basics
• Personal Data and Consent: the six pathways to lawful business models
• Key Data Subject Rights
• Monitoring, Profiling, IT, the business, the GDPR, and case law
• Key Controller Obligations √¢‚Ǩ“ principles, √¢‚Ǩ≈ìtick-boxes√¢‚Ǩ, pseudo-rights, etc.
• Exemptions, Member State Opt-outs
• Risk Management and the EU Data Protection Officer - who, what, why, how?
• International Transfers / Adequacy Regimes - BCRs, SCCs, Privacy Shield
• Non-compliance - the new legal and technological routes to legal enforcement
• GDPR‚s new legal defences against Foreign Governments
• Effect of Brexit on the GDPR - and vice versa
• Business Impacts: Security, Cloud, out-sourcing / Data Processors, IoT, Big Data
• Next Steps - practical enterprise approaches to GDPR compliance
• PIAs, BCRs, Enterprise Privacy Architecture basics
• Project / Privacy Office Organisation and Workflow Management
• Information Architecture, Data Mapping, and Privacy Dataflow Mapping
• Enterprise Privacy Architecture as metadata
• Multi-jurisdictional Legal Architecture
• Automated Privacy Impact Assessment as core Project Initiation subprocess
• The Future: Embedding Transactional EPA Metadata into Operational Systems

Firebrand‚s GDPR course also covers the following Data Protection Officer (DPO) areas:

• Appreciate the statutory requirements of the DPO from 1995 until 2018
• Compare with the basics of the onerous new regime by the GDPR
• Assimilate the new statutory obligations on Controllers
• Appreciate the diverse obligations on and statutory tasks of the DPO
• Learn of the expert knowledge and statutory abilities required of the DPO
• Consider the required expertise in law, IT, security, and associated topics
• Understand a DPO‚s own personal rights, accountabilities, liabilities, and immunities in the role

You do not require any specific prerequisites for this accelerated course. However, it is advised that you have over five years of business experience and adequate knowledge of the English language.

You will sit the following exams on-site, during the course. These are covered by your Certification Guarantee:

• GDPR Foundation Exam
• Duration: 60 minutes
• Format: Multiple choice

• GDPR Practitioner exam
• Duration: 75 minutes
• Format: 40 multiple-choice questions with 4 responses each
• Pass mark: 50%

The exam is open book and you will be provided with a printed copy of the Recitals and Articles of the GDPR

Only the written content of the slide modules will be examined. You will be given Practice Exam Questions both within the the body of the instruction and as self-study aid. The language of the exam and supporting materials ar in English (United Kingdom)