Course Description

Delegates attending this four day course will gain the knowledge and skills to implement an effective compliance programme and fulfil the role of the data protection officer (DPO) under the General Data Protection Regulation (GDPR).

Participants who pass the course exam are awarded the ISO 17024-certificated EU GDPR P qualification by IBITGQ. It is also accredited by the Institute of Information Security Professionals (IISP) and satisfies the IISP Skills Framework requirements at Level 1: A1, A2, A3, A4, A5, A6, A7, B1 and C2.

Pre-requisites

All attendees must have passed the Certified EU GDPR Foundation exam before attending this course.

Target Audience

Managers with responsibility or involvement for making sure their organisations become GDPR compliant, such as:

• Privacy managers
• Data protection managers
• Information security managers
• IT managers
• Project managers
• Corporate governance managers
• Risk and compliance managers
• General or privacy counsels
• Individuals with little experience but who wish to enter the field of data protection with a professional qualification.

Course Outline

Course certification will help individuals to demonstrate competency in data protection compliance and the required knowledge to fulfil the role of a DPO under the GDPR. Covering:

• The role of the DPO
• What constitutes personal data
• Accountability, the privacy compliance framework and a PIMS (personal information management system)
• Lessons to be learned from common data security failures
• The six data protection principles – how to apply them and demonstrate compliance
• The security of personal data
• An organisational risk management framework
• Legal requirements for a DPIA
• How to conduct a DPIA with a DPIA tool
• Why and how to conduct a data mapping exercise
• The rights of data subjects
• Giving and withdrawing consent
• Handling data subject access requests
• The roles of controllers and processors, and the relationships between them
• Transferring personal data outside the EU and the mechanisms for compliance
• How to prepare for GDPR compliance using a compliance gap assessment tool.

EU GDPR Practitioner exam

Attendees take the EU GDPR P exam at the end of the course – a 90-minute, multiple-choice, ISO 17024-certificated exam set by IBITGQ. There is no extra charge for this exam.

This course is part of our unique EU GDPR learning path, which also includes the Certified EU General Data Protection Regulation Foundation (GDPR) Training Course. It also supports continued professional development programmes by qualifying for 28 CPD/CPE credits.

Please note that all EU General Data Protection Regulation (GDPR) Foundation and Practitioner exams are now online exams, so you will need to bring a ‘pop-up enabled’ laptop/tablet to the venue. Full details on how to access the exam will be provided by email 1-2 days before sitting the exam. All other IBITGQ exams will follow the above format from 1 January 2018.

Exam results and certificates

• Where exams are taken online (either remotely or by computer in the classroom), provisional exam results will be available immediately on completion of the exam. Confirmed exam results will be issued within 10 working days from the date of the exam
• Where exams are done in paper form, we aim to make confirmed exam results available within 10 working days from the date of the exam
• For both online and paper exams, certificates for those who have achieved a passing grade will be issued within 10 working days from the date of the exam
• Results notifications and certificates are sent directly to candidates by the relevant exam board in electronic format; please note that hard copy exam certificates are not issued.