The course is in English, fully online and self-paced. It follows the Regulation itself and applies across the EU, so it is not tied to the national law of a single country.
What you will be able to do after the course
- identify and document the lawful basis for each processing activity;
- run an internal GDPR audit and keep Article 30 records of processing;
- carry out a Data Protection Impact Assessment (DPIA);
- handle data subject requests correctly and on time;
- set up a breach notification procedure that meets the 72-hour rule;
- apply data protection by design and by default;
- assess GDPR risks in AI systems and international data transfers;
- show accountability when a supervisory authority asks for evidence.
Programme in 12 parts
- Introduction to the GDPR: scope, controllers and processors.
- How the GDPR works across the EU: national authorities, the one-stop-shop and the EDPB.
- Personal data and core definitions, special categories and lawful bases.
- Key concepts: consent, privacy by design and by default, the DPO and international transfers.
- Practical implementation: internal audit, Article 30 records, accountability and incident response.
- Principles of processing, with examples from real businesses.
- Data Protection Impact Assessment, with a worked video surveillance example.
- Rights of data subjects and how to handle their requests.
- The GDPR in HR: recruitment, retention and employee data.
- The GDPR and AI: automated decisions, profiling and explainability.
- Security of personal data and breach notification.
- The GDPR and the ePrivacy rules: cookies, electronic communications and marketing.
Practical materials
A DPIA example, a framework for records of processing, a data mapping structure, privacy documentation models, procedures for data subject rights, incident response guidance and a glossary of terms.
Who the course is for
Data protection officers, compliance officers, legal counsel, HR managers, IT and information security professionals, AI governance teams and senior management, as well as SMEs and public sector organisations that process personal data.
Course author
Joana Dimitrova, PhD, lecturer in business and professional skills, with more than 15 years of experience as a project manager in IT and e-learning, including LMS deployments and corporate training projects.
Training for your whole team
We make group offers for companies and organisations. Fill in the offer form at the bottom of this page and we will send you a proposal based on the number of participants.