PRV-210Privacy & Data Protection

Data Subject Rights Operations: GDPR, CCPA and HIPAA Access

What you leave with

A DSAR runbook: intake, identity verification, datastore search, vendor sub-requests, exemptions, SLA clock, response pack and evidence file.

Same obligation, two realities

Early-stage and SMEmanual search across ten systems, one person.
Enterpriseconnectors, datastore owners, legal review queue, volume, and regulator-grade evidence packages.

How the course runs

  • The obligation: where the responsibility comes from, cited by section.
  • Two realities: how it is met in a small organisation and in an enterprise.
  • The method: step-by-step practice with templates and edge cases.
  • Paired labs: complete the one matching your work, read the other.
  • Artefact and assessment: submit the artefact; a rubric and a short scenario quiz decide the certificate.