EU GDPR Advanced for Management

This course is for managers and leaders responsible for personal data in organisations that operate in, or serve people in, the EU and EEA. It builds on the essentials to cover accountability across group entities, DPIAs and prior consultation, Data Protection Officers, joint controllers and processor management. You will also learn how to manage transfers outside the EEA after Schrems II, how cross-border processing and the lead authority work, and how to lead breach response and manage enforcement risk.
Modules
5
Duration
About 60 minutes
Pass mark
80%
Assessment
10 questions from a bank of 17

Learning outcomes

  • ✓Design accountability and governance arrangements that work across multiple EU entities.
  • ✓Decide when a DPIA is required, when prior consultation is needed and when a DPO must be designated under Article 37.
  • ✓Distinguish joint controllers from controller and processor relationships, and manage each appropriately.
  • ✓Explain the main mechanisms for transfers outside the EEA, including adequacy, Standard Contractual Clauses and transfer impact assessments.
  • ✓Describe how cross-border processing is supervised through the lead authority and how breaches should be managed.
  • ✓Summarise the corrective powers and fines available to supervisory authorities and how to reduce enforcement risk.

Course contents

  1. Module 1: Accountability and governance across EU entities

    Video (5 scenes) · 2 lessons · 2 practice questions

  2. Module 2: DPIAs, prior consultation and the DPO

    Video (5 scenes) · 2 lessons · 3 practice questions

  3. Module 3: Joint controllers and processor management

    Video (5 scenes) · 2 lessons · 2 practice questions

  4. Module 4: International transfers outside the EEA

    Video (5 scenes) · 2 lessons · 2 practice questions

  5. Module 5: Cross-border supervision, breaches and enforcement

    Video (5 scenes) · 2 lessons · 2 practice questions

  6. Final assessment & certificate