Personal Data Protection Training

Lesson 1 • Core Data Protection Principles

Introduces the foundational principles governing lawful data handling. Learners connect each principle to real organisational behaviours.

Lesson 2 • Roles and Responsibilities in Data Processing

Distinguishes controllers, processors, and joint controllers. Learners identify their own role and its legal implications.

Lesson 3 • Rights of Data Subjects

Covers the rights individuals hold over their personal data. Learners map each right to corresponding organisational obligations.

Lesson 4 • Legal Bases for Processing Personal Data

Explains the six lawful bases for processing and when each applies. Learners select appropriate bases for common business scenarios.

Lesson 1 • Global Data Protection Regulatory Frameworks

Surveys major regional and national data protection regimes and their shared principles. Learners recognise how frameworks overlap and diverge.

Lesson 2 • Compulsory Organisational Compliance Measures

Identifies required policies, records, and accountability structures. Learners build a compliance checklist tailored to their organisation.

Lesson 3 • Determining Territorial Scope

Explains how regulations apply based on establishment, targeting, and data location. Learners determine which rules govern their specific operations.

Lesson 4 • Penalties, Fines, and Reputational Risk

Quantifies the financial and reputational consequences of non-compliance. Learners prioritise compliance investments based on risk exposure.

Lesson 1 • Conducting a Data Discovery Exercise

Provides structured methods for locating personal data across systems and departments. Learners apply discovery techniques to uncover hidden data stores.

Lesson 2 • Building and Maintaining a Data Inventory

Guides creation of a living register of all personal data assets. Learners design inventory fields that satisfy regulatory record-keeping requirements.

Lesson 3 • Understanding Data Flows Across the Organisation

Traces how personal data enters, moves through, and exits organisational systems. Learners visualise end-to-end data journeys before documenting them.

Lesson 4 • Data Flow Mapping Techniques

Introduces diagramming methods to represent data flows visually. Learners produce flow maps that support impact assessments and audits.

Lesson 1 • Privacy-Enhancing Technologies

Surveys technical tools that reduce privacy risk while preserving utility. Learners select appropriate technologies for specific data protection challenges.

Lesson 2 • Conducting a Data Protection Impact Assessment

Provides a step-by-step methodology for assessing and mitigating privacy risks in new projects. Learners complete a full impact assessment on a realistic scenario.

Lesson 3 • Data Minimisation and Purpose Binding in Systems

Applies minimisation and purpose limitation at the technical architecture level. Learners redesign data collection forms and APIs to collect only necessary data.

Lesson 4 • Privacy by Design Core Principles

Introduces the seven foundational principles of privacy by design. Learners translate abstract principles into engineering and business requirements.

Lesson 1 • Security Risk Assessment for Personal Data

Applies risk assessment methodology specifically to personal data assets. Learners prioritise security controls based on data sensitivity and threat likelihood.

Lesson 2 • Monitoring, Logging, and Audit Trails

Implements logging strategies that detect unauthorised access and support forensic investigation. Learners configure audit trail requirements for personal data systems.

Lesson 3 • Access Control and Identity Management

Establishes principles for limiting data access to authorised personnel only. Learners design role-based access models aligned with data minimisation.

Lesson 4 • Organisational Security Measures

Addresses non-technical controls including policies, physical security, and staff practices. Learners integrate organisational measures with technical controls.

Lesson 1 • Regulatory Notification Requirements

Details compulsory timelines and content for notifying supervisory authorities. Learners draft compliant authority notifications for realistic breach scenarios.

Lesson 2 • Classifying and Detecting Data Breaches

Defines what constitutes a personal data breach and how to detect one early. Learners distinguish reportable breaches from minor security incidents.

Lesson 3 • Containment and Forensic Investigation

Guides immediate containment actions and evidence preservation. Learners apply a structured investigation process to determine breach scope and cause.

Lesson 4 • Notifying Affected Data Subjects

Covers when and how to communicate breaches directly to individuals. Learners craft clear, legally compliant subject notifications.

Lesson 1 • Mapping Third-Party Data Relationships

Identifies all external parties that receive or process personal data on the organisation's behalf. Learners categorise vendors by processing role and risk level.

Lesson 2 • Vendor Due Diligence and Assessment

Establishes a structured process for evaluating vendor privacy and security practices before engagement. Learners conduct a due diligence assessment using a standardised questionnaire.

Lesson 3 • Data Processing Agreement Requirements

Specifies compulsory contractual clauses governing processor relationships. Learners review and negotiate data processing agreements for compliance gaps.

Lesson 4 • Managing Vendor Incidents and Offboarding

Addresses how to respond when a vendor suffers a breach and how to safely terminate vendor relationships. Learners draft vendor offboarding data return and deletion procedures.

Lesson 1 • Metrics, Reporting, and Continuous Improvement

Defines key performance indicators for data protection and structures executive reporting. Learners build a dashboard that tracks programme health and drives improvement.

Lesson 2 • Data Protection Governance Structures

Establishes accountability frameworks, steering committees, and ownership models. Learners design a governance structure appropriate for their organisation's size and risk profile.

Lesson 3 • Policies, Standards, and Procedures Framework

Designs a hierarchical policy architecture that operationalises data protection principles. Learners draft a policy document using a standardised template.

Lesson 4 • Privacy Programme Maturity Assessment

Applies a maturity model to benchmark current programme capabilities and identify gaps. Learners score their organisation and prioritise improvement initiatives.