Helping Great Companies Get Better at Compliance

Course Overview

This masterclass is designed to help you develop key skills necessary for effective personal data processing management and GDPR compliance across various situations.

Upon completion of the training, you will be equipped to independently develop data protection strategies, ensuring GDPR compliance and raising trust levels among clients and partners. Additionally, through practical examples and best practices, you will be able to implement all necessary measures for effective management and protection of personal data within your organization.


Who is this training for? 

This training is intended for all professionals who handle personal data and manage information within their organizations. It is recommended for the following groups:

  1. Data Protection Officers (DPO) who are responsible for GDPR compliance and data protection policy management. 
  2. Executive staff who make strategic decisions and ensure compliance with legal frameworks. 
  3. Managers at all levels who oversee data processing and security measure implementation.
  4. Legal experts who advise organizations on data processing legality and legal bases.
  5. IT professionals responsible for technical data protection measures and security protocols.
  6. Human Resources who process employee personal data and ensure their privacy.
  7. Marketing and sales teamswho collect and use client and user data.
  8. Anyone who processes personal data as part of their work duties and wants to ensure GDPR compliance.


Modules 

  • Data Processing PrinciplesCovers GDPR fundamental principles: lawfulness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality. Focus is on applying these principles in daily operations.
  • Legal Bases for Processing Analyzes six legal bases for data processing under GDPR. Includes consent, contract, legal obligations, legitimate interest, vital interests, and public interest. Emphasis on selecting and documenting appropriate legal basis.
  • Data Subject Rights Thoroughly covers individual rights under GDPR. Covers right to information, access, rectification, erasure, processing limitation, data portability, objection, and protection from automated decision-making. Includes practical advice for handling requests.
  • Data Protection Officer Focuses on DPO role and responsibilities. Explains when appointment is mandatory, required qualifications, optimal position within organization, and key tasks. Includes strategies for raising data protection awareness.
  • Technical and Organizational Protection Measures Covers implementation of protective measures. Includes risk assessment, pseudonymization, encryption, ensuring data confidentiality and availability, security testing, physical protection measures, and incident management.
  • Digital Business Compliance Deals with GDPR application in digital environment. Covers website compliance, applications, online forms, cookie management, e-commerce, and digital marketing. Includes social media review.
  • GDPR Compliance in Human Resources Focuses on employee data processing. Covers legal bases, security measures, employee rights, workplace monitoring, and data retention and deletion rules. Includes GDPR application in recruitment process.
  • Video Surveillance Compliance Explains aligning video surveillance with GDPR. Covers legal framework, permitted purposes, information obligations, security measures, access control, and footage retention period. Includes special rules for work areas.
  • Legitimate Interest Test Thoroughly explains concept and application of legitimate interest test. Describes three key test steps, importance of documentation, and provides practical examples. Ends with exercises on real scenarios.
  • Data Protection Impact Assessment (DPIA) Focuses on conducting DPIA. Explains when mandatory, implementation steps, risk assessment methods, and defining protection measures. Includes supervisory authority consultation process and practical examples.
  • Controller and Processor Deals with managing data processing outside organization. Covers role identification, processing agreement content, party responsibilities, and subcontractor chain management. Includes audit implementation instructions.
  • Incident Covers personal data breach management. Includes breach recognition and definition, establishing internal procedures, risk assessment, notifying supervisory authority and data subjects. Concludes with prevention strategies.

Lessons

  1. Chapter 1

    Poglavlje 1

    COURSE OVERVIEW

  2. Chapter 2

    Poglavlje 2

    KEY PRINCIPLES FOR PERSONAL DATA PROCESSING

  3. Chapter 3

    Poglavlje 3

    LEGAL BASES FOR PERSONAL DATA PROCESSING

  4. Chapter 4

    Poglavlje 4

    RIGHTS OF THE DATA SUBJECT

  5. Chapter 5

    Poglavlje 5

    THE ROLE OF THE DATA PROTECTION OFFICER

  6. Chapter 6

    Poglavlje 6

    TECHNICAL AND ORGANISATIONAL MEASURES FOR DATA PROTECTION

Why apply?

  • Earn the prestigious CCE-GDPR/ADP certificate

  • Gain practical experience in drafting GDPR documents

  • Access additional materials: useful documents, contract and statement templates, and practical implementation guidelines

  • Take interactive tests to assess your knowledge

  • Learn from experts with experience in regulatory audits and legal proceedings

  • Build an advanced data protection system

  • Develop expertise in technical and organizational measures

  • Instructors participated in the development of local GDPR regulations

  • Opportunity for consultation with GDPR experts

Reach your potential.