Certified General Data Protection Regulation (GDPR) Foundation - Serbia and Montenegro

Certified General Data Protection Regulation (GDPR) Foundation Course Outline

Module 1: Introduction to GDPR

• GDPR in a Nutshell
• Generate Customer Confidence
• Focus of GDPR
• What is Personal Information?
• Who has Personal Data?
• Lawful Processing of Personal Data

Module 2: GDPR Terminology and Techniques

• Key Roles
• Data Set
• Subject Access Request (SAR)
• Data Protection Impact Assessments (DPIA)
• What Triggers a Data Protection Impact Assessment?
• A DPIA is Not Required in the Following Cases
• Processes to be Considered for a DPIA
• Responsibilities
• DPIA Decision Path
• DPIA Content
• How Do I Conduct A DPIA?
• Signing Off the DPIA
• Mitigating Risks Identified By the DPIA
• Privacy by Design and Default
• Privacy by Design
• External Transfers
• Profiling
• Pseudonymisation
• Principles, User Rights, Obligations
• One Stop Shop

Module 3: Structure of the Regulation

• The Parts of the GDPR
• Format of the Articles
• Articles

Module 4: Principles and Rights

• Introduction
• Legality Principle
• How the Permissions Work Together
• Lawfulness of Processing Conditions
• Lawfulness for Special Categories of Data
• Criminal Offence Data
• Consent
• Transparency Principle
• Fairness Principle
• Rights of Data Subjects
• Purpose Limitation Principle
• Minimisation Principle
• Accuracy Principle
• Storage Limitation Principle
• Integrity & Confidentiality Principle
• Accountability Principle

Module 5: Demonstrating Compliance

• UK Data Transfers Post-Brexit
• UK Representative Requirements
• ICO Compliance and Enforcement
• Data Breach Notification in the UK
• Legal Bases for Processing Personal Data

Module 6: Incident Response & Data Breaches

• What is a Personal Data Breach?
• Notification Obligations
• What Breaches Do I Need to Notify the Relevant Supervisory Authority About?
• What Information Must Be Provided to the SA?
• How Do I Report a Breach to the SA?
• Notifying Data Subjects
• What Should I do to Prepare for Breach Reporting?
• Updating Policies and Procedures
• Ways to Minimise the Breach Impact
• Incident Response Protocols
• Compliance Strategies

Module 7: Understanding the Principle Roles

• What the GDPR Makes Businesses Responsible For
• Difference Between a Data Controller and a Data Processor
• How the Roles Split Between Controllers and Processors
• Joint Controllers
• Main Obligations of Data Controllers
• Main Obligations of the Data Processor
• Controller-Processor Contracts: Contractual Implications
• Sub-Processor Appointment
• EU Representative
• Maintaining Records and Cooperating with Supervisory Authorities
• Keeping PII Secure and Confidential
• Data Breach Transparency and Notification
• WARNING: It is Easy to Become a Controller Without Recognising the Situation
• Appointing a DPO – If Necessary
• Transferring Data Outside the EEA

Module 8: Role of the DPO

• UK GDPR: Roles of Data Controllers vs. Data Processors

Module 9: Subject Access Requests and How to Deal with them?

• Subject Access Requests (SAR)
• Dealing with SAR
• Handling SARs in the UK

Module 10: UK Implementation

• Introduction to UK GDPR
• Data Protection Act 2018
• Role of the Information Commissioner's Office (ICO)
• Cross-Border Data Transfers Post-Brexit
• UK's Role in the Global Data Protection Landscape

Module 11: Key Features

• Key Features of GDPR
  • Specific Permission
  • Privacy by Design
  • Data Portability
  • Right to be Forgotten
  • Definitive Consent
  • Information in Clear Readable Language
  • Limits on the Use of Profiling
  • Everyone Follows the Same Law
  • Adopting Techniques

GDPR Foundation Exam Information

To achieve the Certified General Data Protection Regulation (GDPR) Foundation, candidates will need to sit for an examination. The exam format is as follows: 

• Question Type: Multiple Choice 
• Total Questions: 45 
• Total Marks: 45 Marks 
• Pass Mark: 65%, or 29/45 Marks 
• Duration: 60 Minutes 
• Open Book/ Closed Book: Closed Book

Who Should Attend this Certified General Data Protection Regulation (GDPR) Foundation Course?

This course is designed for professionals involved in data protection, privacy, compliance, governance, security, and personal data processing. This course is ideal for the following professionals:

• Data Protection Officers
• Compliance Officers
• Privacy Professionals
• Information Governance Officers
• Legal Professionals
• HR Professionals
• Information Security Professionals
• Risk and Governance Managers

Prerequisites for the Certified General Data Protection Regulation (GDPR) Foundation Course

There are no formal prerequisites for attending this Certified GDPR Foundation Course. However, a basic knowledge of data protection, privacy, or organisational compliance may help delegates understand the course concepts more effectively.

Certified General Data Protection Regulation (GDPR) Foundation Course Overview

The Certified General Data Protection Regulation (GDPR) Foundation Course covers GDPR principles, lawful processing, individual rights, DPIAs, data protection by design and default, profiling, and accountability. It also introduces UK GDPR implementation, the Data Protection Act 2018, and ICO oversight.

This training strengthens delegates’ understanding of data protection responsibilities, privacy risks, and compliance requirements. It helps them build the knowledge needed to support lawful data handling, individual rights, breach response, and responsible data protection practices.

This 2-Day course offered by The Knowledge Academy enables delegates to understand and support GDPR compliance activities. They will be able to recognise data protection responsibilities, respond to individual rights requests, assess privacy risks, and support breach and compliance procedures.

Certified General Data Protection Regulation (GDPR) Foundation Course Objectives

• To understand GDPR principles, terminology, and regulatory requirements
• To identify lawful bases, consent requirements, and individual rights
• To understand controller, processor, and DPO responsibilities
• To understand DPIAs, accountability, and data protection by design
• To manage SARs and personal data breach requirements
• To understand compliance and international data transfer requirements

Learning Outcomes of this Certified GDPR Foundation Course

After completing this course, delegates will understand how GDPR requirements apply to the processing and protection of personal data. They will be better prepared to support individual rights, privacy governance, DPIAs, breach response, controller and processor duties, and organisational compliance.

What’s Included in the Certified General Data Protection Regulation (GDPR) Foundation Course?

• Certified General Data Protection Regulation (GDPR) Foundation Examination
• World-Class Training Sessions from Experienced Instructors
• Interactive Learning with 24*7 Support
• Digital Delegate Pack