Course description

Are you willing to go that extra mile to become the next generation Data Protection Officer? Because this is what we, at EIPA, have done when preparing this course for you! In a time of unprecedented challenges to our status quo, with organisations forced to adapt overnight to the new normal, data protection has been ranking high on the European agenda. More than ever, you will play an essential role in supporting your organisation to safeguard the privacy rights in a time of accelerated digital transformation.

This is why a multifaceted approach in delivering this course is paramount. Experts and practitioners at the forefront of data protection will guide you along the legal framework of the European data protection legislation, while elaborating on some of the most pressing privacy-related issues that have emerged in the context of the pandemic. This will involve applying an interactive and on-the-job methodology: role playing, concrete and realistic case studies, with both successful and non-successful outcomes and peer-to-peer discussions. By the end of the course, you will be provided with all the tools to design or augment a thorough data protection compliance programme in your organisation.

What will you learn

You will:

• The European legal framework for data protection (including the GDPR);
• Key data protection concepts, principles and obligations;
• Actors, roles and responsibilities;
• The role of the DPO (Data Protection Officer), the EDPS (European Data Protection Supervisor) and the national supervisory authorities;
• Severity assessment of data breaches and assurance role of the DPO (accountability, requirements and demonstrating compliance);
• Cyber security, data protection audits, privacy and digital sovereignty;
• Options and solutions for cross-border data transfer and third-country data transfers;
• e-Privacy design and impact assessment;
• Grounds for processing, including legitimate interest and consent;
• The rights of data subjects and how to handle them.

Course methodology/highlights

We believe practical know-how is the key to effective learning. This course therefore includes:

• Detailed explanations of the key concepts, principles, actors and roles in the field of data protection and security;
• Role play and group exercises;
• Preparatory workshop for the final certification examination (optional);
• Insights with case-law examples;
• Input and coaching on practical issues encountered by participants from the DPO network, European institutions and agencies, Europol, Eurojust, EDPS, national authorities and other data protection experts;
• A highly interactive approach – the structure of the course will give you opportunities to ask questions and share experiences during the dedicated Q&A sessions.

To optimise your experience, we also recommend that you follow the optional preparatory workshop for the certification examination, when time will be devoted to a recap of the essentials, exercises, a discussion and a Q&A session.

How will it help you?

• You will be able to process and transfer personal data, and comply with data protection requirements in your day-to-day work.
• You will be better aware of severity assessments of data breaches, data protection audits, cyber security and privacy.
• You will have a thorough understanding of how things work in practice and a vision of the EU’s future in this field.
• You will have a solid basis for continuous learning as a Data Protection Officer afterwards.
• You will benefit directly from the insights of data protection experts and from networking opportunities during the online breaks.
• You will obtain the EIPA attendance certificate.
• You will take the EIPA Data Protection Certification examination.
• You will be able to qualify as a data protection professional at European level.
• You will develop your professional international network in the field of data protection.

After taking this course, you can join EIPA’s dedicated community of practice together with other, former participants. You will also have access to the course materials for a duration of three months after the course.

Examination

On completion of the course, participants can take part in an exam leading to the awarding of the EIPA Data Protection Professional Certificate.

A few details about the examination:

• Examinees can use their own device to take the examination.
• The examination can be taken twice a year at EIPA headquarters in Maastricht.
• The examination lasts 2 hours.
• The maximum score obtainable is 100 points and in order to pass the examination, examinees need to obtain 60 points.

Examination process
Review
In order to guarantee a fair process, two randomly allocated reviewers from the examination board will evaluate the essays separately. The Chair of the examination board will have the last word after seeing the conclusions of both reviewers.

Language
The examination is offered in English only. The time limit for the examination is sufficient for the vast majority of candidates, including non-native English speakers. No points are deducted due to possible grammar or language mistakes.

Handling of exams
EIPA will take all available precautions to ensure the appropriate and secure handling of completed essays.

Examination re-sit
In the event you did not manage to reach the set threshold and did therefore not pass the exam, you are offered the opportunity to do one examination re-sit for €150 within one year.

The Examination Board
The exam is under the supervision of an examination board. The examination board meets regularly to discuss the certification course requirements and approve the examinations. They discuss as needed to review and resolve any submitted certification appeals. The examination board consists of experts who have proven knowledge of and practical expertise in the field of data protection, one of whom will serve as chair.

Certificate validity
Data Protection issues continue to change and it is very important to keep yourself ahead and update your knowledge regularly. Therefore, the EIPA certificate is valid for a period of two years. In order to update your knowledge and maintain the validity of your certificate you will need to attend EIPA’s refresher course on data protection every two years. You will receive an updated certificate after taking part in this.

You can find our full Certification policy here: www.eipa.eu/dataprotection

Target group

• Data Protection Officers and other data protection professionals;
• Legal and IT professionals;
• Anyone, from either the public or private sector, with proven working experience in the processing of personal data;
• Anyone who needs a certification at European level in order to advance their professional career;
• Candidates who wish to take and pass the examination.

Practical information

Course venue
European Institute of Public Administration (EIPA)
O.L. Vrouweplein 22
6211 HE, Maastricht
the Netherlands

Programme Organiser
Ms Eveline Hermens
Tel: +31 43 3296259
e.hermens@eipa.eu 

Fee
The fee includes documentation and refreshments. Lunches, a reception or dinner are included if mentioned in the programme. Accommodation and travel costs are at the expense of the participants or their administration.

Discount
EIPA member fee
EIPA offers a discount to all civil servants working for one of EIPA’s supporting countries, and civil servants working for an EU institution, body or agency.

Who are the supporting countries?
Civil servants coming from the following EIPA supporting countries are entitled to get the reduced fee: Austria, Belgium, Bulgaria, Cyprus, Czech Republic, Denmark, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Spain, Sweden.

For all other participants, the regular fee applies.

Meals
Some lunches as well as the dinner will be served at a restaurant in town. Special dietary requirements (e.g. vegetarian, diabetic) can be indicated once you receive the confirmation of the course.

Confirmation
Confirmation of registration will be forwarded to participants on receipt of the completed online registration form.

Payment
Prior payment is a condition for participation.

Cancellation policy
For administrative reasons you will be charged €150 for cancellations received within 15 days before the activity begins. There is no charge for qualified substitute participants.

EIPA reserves the right to cancel the activity up to 2 weeks before the starting date. In that case, registration fees received will be fully reimbursed. EIPA accepts no responsibility for any costs incurred (travel, accommodation, etc.).