Certified General Data Protection Regulation (GDPR) Foundation in Reading

Certified General Data Protection Regulation (GDPR) Foundation Course Outline

Module 1: Introduction to GDPR

• GDPR in a Nutshell
• Generate Customer Confidence
• Focus of GDPR
• What is Personal Information?
• Who has Personal Data?
• Lawful Processing of Personal Data

Module 2: GDPR Terminology and Techniques

• Key Roles
• Data Set
• Subject Access Request (SAR)
• Data Protection Impact Assessments (DPIA)
• What Triggers a Data Protection Impact Assessment?
• A DPIA is Not Required in the Following Cases
• Processes to be Considered for a DPIA
• Responsibilities
• DPIA Decision Path
• DPIA Content
• How Do I Conduct A DPIA?
• Signing Off the DPIA
• Mitigating Risks Identified By the DPIA
• Privacy by Design and Default
• Privacy by Design
• External Transfers
• Profiling
• Pseudonymisation
• Principles, User Rights, Obligations
• One Stop Shop

Module 3: Structure of the Regulation

• The Parts of the GDPR
• Format of the Articles
• Articles

Module 4: Principles and Rights

• Introduction
• Legality Principle
• How the Permissions Work Together
• Lawfulness of Processing Conditions
• Lawfulness for Special Categories of Data
• Criminal Offence Data
• Consent
• Transparency Principle
• Fairness Principle
• Rights of Data Subjects
• Purpose Limitation Principle
• Minimisation Principle
• Accuracy Principle
• Storage Limitation Principle
• Integrity & Confidentiality Principle
• Accountability Principle

Module 5: Demonstrating Compliance

• UK Data Transfers Post-Brexit
• UK Representative Requirements
• ICO Compliance and Enforcement
• Data Breach Notification in the UK
• Legal Bases for Processing Personal Data

Module 6: Incident Response & Data Breaches

• What is a Personal Data Breach?
• Notification Obligations
• What Breaches Do I Need to Notify the Relevant Supervisory Authority About?
• What Information Must Be Provided to the SA?
• How Do I Report a Breach to the SA?
• Notifying Data Subjects
• What Should I do to Prepare for Breach Reporting?
• Updating Policies and Procedures
• Ways to Minimise the Breach Impact
• Incident Response Protocols
• Compliance Strategies

Module 7: Understanding the Principle Roles

• What the GDPR Makes Businesses Responsible For?
• Difference Between a Data Controller and a Data Processor
• How the Roles Split
• Controllers and Processors
• Contractual Implications for Controllers and Processors Under GDPR
• Controllers: Key Points
• Main Obligations of Data Controllers
• Demonstrate Compliance
• Joint Controllers
• Representative
• Controller-Processor Contract
• Maintain Records
• Keeping Records for Small Businesses
• Cooperation with Supervisory Authorities
• Keeping PII Secure
• Data Breach Transparency
• Role of the Data Processor
• Controller-Processor Contract
• Main Obligations of the Processor
• Perform Only the Data Processing Defined by the Data Controller
• WARNING: It is Easy to Become a Controller Without Recognising the Situation
• Update the Data Controller
• Sub-Processor Appointment
• Keep PII Confidential
• Maintaining Records
• Cooperate with Supervisory Authorities
• Security
• Notify Breaches
• Appoint a DPO – If Necessary
• Transferring Data Outside
• Note: If You Have Staff You Will be a Data Controller
• Data Processors Key Points

Module 8: Role of the DPO

• UK GDPR: Roles of Data Controllers vs. Data Processors

Module 9: Subject Access Requests and How to Deal with them?

• Subject Access Requests (SAR)
• Dealing with SAR
• Handling SARs in the UK

Module 10: UK Implementation

• Introduction to UK GDPR
• Data Protection Act 2018
• Role of the Information Commissioner’s Office (ICO)
• Cross-Border Data Transfers Post-Brexit
• UK’s Role in the Global Data Protection Landscape

Module 11: Key Features

• Key Features of GDPR
  • Specific Permission
  • Privacy by Design
  • Data Portability
  • Right to be Forgotten
  • Definitive Consent
  • Information in Clear Readable Language
  • Limits on the Use of Profiling
  • Everyone Follows the Same Law
  • Adopting Techniques

Who Should Attend this Certified General Data Protection Regulation (GDPR) Foundation Course?

The Certified General Data Protection Regulation (GDPR) Foundation Course is ideal for individuals seeking to understand GDPR principles, regulatory requirements, and data protection responsibilities. It is suitable for professionals responsible for supporting GDPR compliance within their organisations. You should attend this course if you are:

• Compliance Officer: Gaining essential knowledge of GDPR obligations and practices
• Data Protection Officer (DPO): Building a strong foundation for GDPR responsibilities
• HR Professional: Understanding employee data handling and privacy requirements
• IT Manager: Implementing data protection measures within technical systems
• Business Manager: Ensuring operations align with GDPR requirements
• Aspiring GDPR Specialist: Starting a career in data protection and privacy compliance

Prerequisites of the Certified General Data Protection Regulation (GDPR) Foundation Course

There are no formal prerequisites for attending the Certified General Data Protection Regulation (GDPR) Foundation Course. However, a basic understanding of data protection concepts can be beneficial.

Certified General Data Protection Regulation (GDPR) Foundation Course Overview

Certified General Data Protection Regulation (GDPR) Foundation Course introduces delegates to GDPR principles, legal requirements, and data protection compliance. It explains personal data management, data subject rights, and regulatory responsibilities. The course builds practical GDPR knowledge.

Delegates develop skills in lawful processing, breach management, and compliance activities. The course strengthens understanding of GDPR principles and data governance. These skills support effective data protection practices.

This 2-Day course by The Knowledge Academy enables delegates to apply GDPR requirements in the workplace. Delegates support compliance activities and manage personal data responsibly. These skills strengthen organisational privacy practices.

Certified GDPR Foundation Course Objectives

• To understand GDPR principles and legal requirements
• To explain the rights of data subjects
• To identify the responsibilities of controllers and processors
• To apply lawful processing and GDPR compliance requirements
• To support data breach management and incident response
• To contribute to effective data protection practices

Upon completing this Certified General Data Protection Regulation (GDPR) Foundation Course, delegates will be able to apply GDPR requirements, support compliance activities, and manage personal data responsibly. They will also contribute to effective data protection within their organisations.

What’s Included in this Certified General Data Protection Regulation (GDPR) Foundation Course?

• Certified General Data Protection Regulation (GDPR) Foundation Examination
• World-Class Training Sessions from Experienced Instructors
• Interactive Learning with 24*7 Support
• Digital Delegate Pack

You’ll also get access to the MyTKA Training Portal, which will be your go to hub for all your training.

GDPR Foundation Exam Information

To achieve the Certified General Data Protection Regulation (GDPR) Foundation, candidates will need to sit for an examination. The exam format is as follows: 

• Question Type: Multiple Choice 
• Total Questions: 45 
• Total Marks: 45 Marks 
• Pass Mark: 65%, or 29/45 Marks 
• Duration: 60 Minutes 
• Open Book/ Closed Book: Closed Book