Course content
Welcome
Origins and Historical Context of Data Protection Law
European Union Institutions
Legislative Framework
Data Protection Concepts
Territorial and Material Scope of the GDPR
Data Processing Principles
Lawful Processing Criteria
Information Provision Obligations
Data Subjects' Rights
Security of Personal Data
Accountability Requirements
International Data Transfers
Supervision and Enforcement
Employment Relationships
Surveillance Activities
Direct Marketing
Internet Technology and Communications
Outsourcing
Flashcards
Practice exams and bonus material
Almost a Certified Information Privacy Professional
Welcome
- Welcome students!
- How to study effectively
- Next steps
- Before you go
- Update for Students Taking the CIPP/E Exam on or After September 2, 2024
Origins and Historical Context of Data Protection Law
- Introduction
- Historical context
- Please remember..
European Union Institutions
- Introduction
- About the Charter
- The Institutions
- The other court..
- Please remember..
- Test
Legislative Framework
- Introduction
- The Framework and general data protection legislation
- The Framework – other parts
- Test
Data Protection Concepts
- Introduction
- Personal data
- The controller
- For further reference..
Territorial and Material Scope of the GDPR
- Introduction
- Article 3 paragraph 1
- Article 3 paragraph 2
- Article 2
- Test
Data Processing Principles
- Principles I/II
- Principles II/II
Lawful Processing Criteria
- Introduction
- Article 6 – Consent and Legitimate Interests
- Article 9 – Sensitive data
- Articles 10 and 11
- Test
Information Provision Obligations
- Introduction
- Articles 13 and 14
- Exceptions Fair processing notes
- Concluding
- Schematic
- Test
Data Subjects' Rights
- Articles 12 – 16
- Articles 17 – 18
- Articles 20 – 22
- Overview
- Test
Security of Personal Data
- Introduction
- Article 28
- Article 32
- Articles 33 and 34 – breaches
- Delivering on security
- Security paperwork
- Incident reponse & NIS2
- PSD2 & Data Goverance Act
- Data Act
- Guidelines 05/2022 on the use of facial recognition technology (FRT) in law enforcement
- Test
Accountability Requirements
- Introduction
- Accountability
- Privacy by default and design
- Article 30 – record keeping
- Article 35 – DPIA
- Article 37 – DPO
- BCRs
- Test
International Data Transfers
- Introduction
- Article 45 – Adequacy Findings and Privacy Shield
- EU-U.S. Data Privacy Framework
- Article 46 – Appropriate Safeguards – BCR
- Article 49 – Derogations
- GDPR’s Relationship with Other Global Legislations
- Test
Supervision and Enforcement
- Introduction
- Self-regulation
- Regulation by the citizen
- Class Actions
- Data Protection Authority (DPA)
- DPA – Competence
- EDPB and the consistency mechanism
- Sanctions and penalties
- Test
Employment Relationships
- Introduction
- Processing grounds
- Workplace monitoring
- Information to be provided
- Work councils
- Whistle-blowing schemes
- Bring your own device (BYOD)
- Risks involved in employee data
- Test
Surveillance Activities
- Increase of surveillance and types of data use
- Communications data
- Video surveillance
- Biometric data
- Location data
- Test
Direct Marketing
- Introduction
- About direct marketing
- Legal framework
- Postal and telephone marketing
- Electronic mail and Location-based marketing
- Online behavioral advertising (OBA)
- Cookie Banner Transparency Standards
- Test
Internet Technology and Communications
- Introduction
- Cloud computing
- Cookies
- Search engines
- Social Networking Services (SNS)
- Online behavioral advertising
- Mobile apps and IoT
- Dark patterns
- Test
Outsourcing
- Outsourcing and roles
- Processor (supplier) obligations
- Data protection obligations in a outsourcing contract
- Offshoring and international data transfers
Flashcards
- 100+ Flashcards to help you prepare for the exam
Practice exams and bonus material
- Study schedules
- Practice exam
- Practice exam 2
- Practice exam 3
Almost a Certified Information Privacy Professional
- Well done and some advice
- Do you want to earn extra?
- One last thing..