Security / Governance, Risk & Compliance

Certified Data Protection Officer (CDPO).

Certified Data Protection Officer training allows you to develop the knowledge and skills necessary to professionally perform the role of a Data Protection Officer (DPO). This training develops the competencies needed to support your organization in complying with the General Data Protection Regulation (GDPR). You will be able to inform, advise and monitor compliance with RODO, as well as work with the supervisory authority.

Issues

RODO (General Data Protection Regulation).
Data Protection Officer (DPO)
Data protection
RODO compliance
Personal data management
Rights of data subjects
Legal basis for processing
Data protection impact assessment
Data protection violations
Supervisory authority
Compliance program
Compliance monitoring

Benefits

Understand the concept of RODO and interpret its requirements
Role of the Data Protection Officer and how to perform it in practice
They will gain the knowledge to manage an organization's RODO compliance program
They will acquire the skills to advise the organization on personal data management

Who is this training for?

Managers or consultants needing in-depth knowledge of RODO

Legal advisors, compliance specialists and information security specialists

Technical and compliance experts who want to prepare for the role of Data Protection Officer

Individuals aspiring to the role of IOD

Prerequisites

Basic knowledge of data protection
Knowledge of the legal basis for privacy
Experience working with legislation (preferred)
Analytical and communication skills

Training program

Introduction to data protection — right to privacy, evolution of regulations (Directive 95/46/EC → GDPR), global context (CCPA, LGPD, APPI)
GDPR architecture — scope of application (material, territorial), key definitions (personal data, processing, controller, processor)
Processing principles — lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity
Legal bases for processing — consent (validity conditions), contract performance, legal obligation, public interest, legitimate interest (LIA)
Special categories of data — sensitive data, criminal data, children's data, processing in the employment context

Data subject rights — information, access, rectification, erasure (right to be forgotten), restriction, portability, objection
Automated decision-making — profiling, right to human intervention, AI Act and GDPR
Controller obligations — privacy by design and privacy by default, records of processing activities (ROPA), appointment of DPO
Processor — processing agreement (Art. 28), liability, sub-processors, data transfers to processors
International data transfers — SCC (Standard Contractual Clauses), adequacy decisions, BCR, Schrems II — practical implications

Data Protection Officer role — appointment (mandatory vs voluntary), independence, competencies, position within the organization
DPO tasks — informing, advising, monitoring compliance, cooperation with the supervisory authority, point of contact
GDPR compliance program — policies (processing, retention, breach), procedures (handling requests, consent management), documentation
Training and awareness building — employee training program, privacy champions, data protection culture
Compliance audit — GDPR audit planning, checklist, tools, reporting, remediation plan

Impact assessment (DPIA) — when required, methodology (identification, risk assessment, remedial measures), prior consultation with the supervisory authority
Breach management — breach definition, procedure (detection → assessment → 72h notification → notifying data subjects), breach register
Data security — technical measures (encryption, pseudonymization, access control) and organizational measures, ISO 27001 and GDPR
Penalties and liability — administrative fines (up to EUR 20M / 4%), civil liability, case studies of supervisory authority decisions
Relationship with the supervisory authority — cooperation, inspections, one-stop-shop mechanism, EDPB

Case study: implementing a GDPR compliance program in an organization — from gap analysis to full compliance
Case study: handling a data breach — from detection through notification to the supervisory authority to notifying data subjects
Case study: conducting a DPIA — risk identification, assessment, remedial measures, documentation
Review of current challenges — AI Act and GDPR, cookies/consent, analytics, marketing, employee monitoring
PECB CDPO exam preparation — exam structure, sample questions, passing strategies