PRV-201Privacy & Data Protection

GDPR in Practice: From Articles to an Operating Program

What you leave with

A 12-month privacy program plan with lawful-basis decisions, DPO determination, Article 30 approach and processor terms.

Same obligation, two realities

Early-stage and SMEno DPO, single entity, five processors, decisions made by one person.
Enterprisegroup structures, lead authority, DPO office, hundreds of processors, works councils.

How the course runs

  • The obligation: where the responsibility comes from, cited by section.
  • Two realities: how it is met in a small organisation and in an enterprise.
  • The method: step-by-step practice with templates and edge cases.
  • Paired labs: complete the one matching your work, read the other.
  • Artefact and assessment: submit the artefact; a rubric and a short scenario quiz decide the certificate.