EXIN Privacy & Data Protection Professional – PDPP

Curriculum

What you will learn

• Duration: 24 hours
• 8 modules
• Knowledge test per module
• Official PeopleCert aligned

• 00 Module 1 – Introduction 6 lessons

  • Welcome
  • GDPR and LGPD
  • PDPP Course Overview
  • Objectives and Target Audience of the PDPP Certification
  • Practical Activities
  • About the PDPP Exam
• 01 Module 2 – Data Protection Policies 31 lessons

  • Introduction – Data Protection Policies
  • Reviewing the Main Definitions
  • Policies and GDPR
  • Policies and Compliance
  • Policy Elements
  • Policy Availability
  • Example of Data Protection Policy Topics
  • Information Security Policy
  • Content of Information Security Policies
  • Effective Policies
  • Data Protection by Design
  • Application of Data Protection by Design (by design)
  • Data Protection by Default
  • Application of Data Protection by Default (by default)
  • Data Protection Officers by Design and by Default
  • Processors and Data Protection
  • Third-Party Organizations and Data Protection
  • What Should Be Done in Practice
  • When Actions Should Be Taken
  • Data Protection by Design Framework
  • The 7 Fundamental Principles of Data Protection
  • 1: Proactive, Not Reactive; Preventive, Not Corrective
  • 2: Privacy by Default
  • 3: Privacy by Design
  • 4: Full Functionality – Positive-Sum, Not Zero-Sum
  • 5: End-to-End Security and Protection Throughout the Data
  • Data Life
  • 6: Visibility and Transparency
  • 7: Respect for User Privacy
  • Corporate Governance Framework
  • PDPP – Module 2 Exercise
• 02 Module 3 – Privacy Information Management System (PIMS) 41 lessons

  • Introduction
  • What to expect from this module?
  • What is Private Information Management?
  • Examples of Problems Related to Personal Information
  • GDPR Principles
  • Those Involved in Privacy
  • Country of Operation
  • Management of Processing with Third Parties
  • What is 'Personal Information'
  • Reason for Processing Personal Information
  • What Needs to Be Considered
  • Internal and External Issues
  • Stakeholders
  • Balance between Organizations and Individuals
  • Format and Storage Medium
  • Subcontractor
  • ISO/IEC 27701
  • Documentation
  • Audit
  • Management System Review
  • Available Resources
  • Privacy Impact Assessment (PIA)
  • Privacy Risks
  • Privacy Risk Assessment
  • Perspectives by Amount of Information Processed
  • Applying PIMS Controls
  • Privacy Information Management Controls
  • Extension of ISO/IEC 27001 Controls
  • Additional Guidelines Aligned with ISO/IEC 27002
  • Conditions for Data Collection and Processing
  • Obligations for Data Subjects
  • Privacy by Design and by Default
  • Sharing, Transfer, and Disclosure of Personal Information
  • Annexes in ISO/IEC 27701
  • Dealing with Private Information Leaks
  • Compliance and Audit
  • Certification
  • Certification at Horizonte
  • Certification Audit
  • Additional Audit Applications
  • PDPP – Module 3 Exercise
• 03 Module 4 – Controller, Processor and DPO Roles 34 lessons

  • Roles of the Controller, Processor, and Data Protection Officer (DPO)
  • Definition of the Role of the Data Controller
  • Details About the Data Controller
  • More Tasks of the Data Controller
  • Role of the Data Processor
  • Tasks of the Data Processor
  • More details about the Data Processor
  • Controllers and Processors outside the EU
  • Responsibilities of the Controller's Representative
  • Processing Records
  • Records as Evidence
  • Controller and Processor Records
  • Introduction to the Role of Data Protection Officer (DPO)
  • Data Protection Officer (DPO) Role Requirements – Core Activities
  • Requirements of the Data Protection Officer (DPO) Role – Large-Scale Processing
  • Requirements of the Role of Data Protection Officer (DPO) – Regular and Systematic Monitoring
  • Voluntary Designation of a DPO
  • Companies Sharing a DPO
  • DPO under a Service Contract
  • Publication of the DPO Contact
  • DPO Position
  • Provision of Resources
  • Independent Role of the DPO
  • Protection of the DPO Role
  • Conflict of Interest
  • Designating a DPO
  • DPO's First Task
  • Second Task of the DPO
  • Third, Fourth, and Fifth Tasks of the DPO
  • The DPO and the Organization
  • The DPO and the Supervisory Authority
  • Data Protection Impact Assessment and Risk Assessment
  • Internal or Contracted DPO
  • PDPP – Module 4 Exercises
• 04 Module 5 – Data Protection Impact Assessment (DPIA) 23 lessons

  • Data Protection Impact Assessment (DPIA)
  • Introduction to the Data Protection Impact Assessment (DPIA)
  • Expected Results of the DPIA
  • Benefits of DPIA
  • Fundamentals of the Data Protection Impact Assessment (DPIA)
  • Stages of a DPIA
  • DPIA – 1 – Identify the Need for a DPIA
  • Reasons for Conducting a DPIA
  • Examples of DPIA Situations
  • DPIA – 2 – Describe the Information Flows
  • DPIA – 3 – Identify Privacy-Related Risks
  • Risk Assessment
  • A Little More About Risks
  • DPIA – 4 – Identify and Evaluate Privacy Solutions
  • Risk Treatment
  • Risk Register
  • Risk Management and Personal Data
  • DPIA – 5 – Complete and Record DPIA Results
  • DPIA – 6 – Integrate DPIA Results into a Project Plan
  • DPIA – 7 – Consult Stakeholders Throughout the DPIA
  • Consulting External Stakeholders
  • Who Needs to Be Involved in the DPIA
  • PDPP – Module 5 Exercises
• 05 Module 6 – Data Breach, Notification and Incident Response 17 lessons

  • Data Breach, Notification and Incident Response
  • Data Security Breaches
  • What is a Personal Data Breach?
  • Forms of Data Breach
  • Vulnerabilities and Violations
  • Protecting Information
  • Responding to a Data Breach
  • Events and Incidents
  • Forms of Incidents
  • Incident Response Plans
  • Roles in Incident Management
  • Notification to the Supervisory Authority
  • Notification to Data Subjects
  • Exceptions to Notification of Data Subjects
  • Final Considerations
  • FIM
  • PDPP – Module 6 Exercises
• 06 Module 7 – Mandatory Practical Exercises

  3 PDPP Practical Exercises

• 07 Module 8 – Preparatory Practice Exams 3 lessons

  • Practice Exam 1: 40 Questions
  • Simulated 2: 40 Questions
  • Simulado 3: 40 Questions