All in One Privacy Masterclass

CISO at SAP teaches you how to Transform your career and Life and Become the greatest privacy professional in the world. That includes getting 3 privacy certifications in less than 60 days.

Buy €247,00 Free Preview

Course curriculum

1. Welcome to the Program
  FREE PREVIEW
2. How to use this Program and Achieve your Goals
3. Administrative Aspects and Course Templates
1. Part 1 S2 Lesson 1_Why Privacy and Security will never die!
2. Part 1 S2 Lesson 2_Privacy vs Security
3. Part 1 S2 Lesson 3_Privacy Risks Expand
4. Part 1 S2 Lesson 4_Cyberattacks and what makes them possible
5. Part 1 S2 Lesson 5_CIA and their Privacy Implications
6. Part 1 S2 Lesson 6_Principles for Building _ Operating Systems to be More Secure
7. Part 1 S2 Lesson 7_Why does an organisation need a privacy program
8. Section Quiz
1. P1 S3 Lesson 1 - GDPR Short Intro
2. P1 S3 Lesson 2 - Format and Definitions
3. P1 S3 Lesson 3 - Principles
4. P1 S3 Lesson 4 - Lawfulness
5. Part 1 S3 Lesson 5_Data Protection Concepts
6. Part 1 S3 Lesson 6_EU Institutions
7. Part 1 S3 Lesson 7_Data Subject Rights
8. Part 1 S3 Lesson 8_Processors under GDPR
9. Part 1 S3 Lesson 9_Processor-Controller agreement
10. Part 1 S3 Lesson 10_Processors, Controllers, Sub Processors - deep dive
11. Part 1 S3 Lesson 11_Sanctions under GDPR
12. Part 1 S3 Lesson 12_Territorial and Material Scope of GDPR with examples
13. Part 1 S3 Lesson 13_Legal Basis for Processing
14. Part 1 S3 Lesson 14_Consent
15. Part 1 S3 Lesson 15_Legal Basis for Processing Sensitive Data
16. Part 1 S3 Lesson 16_Security _ Breach
17. Part 1 S3 Lesson 17_Legitimate interests deep dive - examples
18. Part 1 S3 Lesson 18_Data Processing Obligations
19. Part 1 S3 Lesson 19_Automated Decision Making _ Profiling Deep Dive
20. Part 1 S3 Lesson 20_The right to data portability Deep Dive
21. Part 1 S3 Lesson 21_The right to be forgoten in search engines (part 1)
22. Part 1 S3 Lesson 22_The right to be forgoten in search engine cases - part 2
23. Part 1 S3 Lesson 23_Other obligations
24. Part 1 S3 Lesson 24_Other statutes
25. Part 1 S3 Lesson 25_Internal Audits
26. Part 1 S3 Lesson 26_Codes of conduct and certfication
27. Part 1 S3 Lesson 27_The role of the Lead Supervisory Authority
28. Part 1 S3 Lesson 28_Multi Controller Situations and Joint Controllers
29. Part 1 S3 Lesson 29_General Principles for International Transfers
30. Part 1 S3 Lesson 30_GDPR vs ePrivacy Directive
31. Part 1 S3 Lesson 31_Brexit and GDPR - what has changed_
32. Part 1 S3 Lesson 32_Outsourcing and GDPR
33. Section Quiz
1. P1 S4 Lesson 1_Evolving compliance requirements
2. P1 S4 Lesson 2_Major risks to a company-s IT framework
3. P1 S4 Lesson 3_Application related RISKS
4. P1 S4 Lesson 4_Network related RISKS
5. P1 S4 Lesson 5_Storage related RISKS
6. P1 S4 Lesson 6_Stakeholders expectations for privacy
7. P1 S4 Lesson 7_Privacy vs Security
8. P1 S4 Lesson 8_IT Governance vs Data Governance
9. P1 S4 Lesson 9_The role of the IT professional _ other stakeholders in preserving privacy
10. Section 4 Quiz
1. P1 S5 Lesson 1 _Privacy Foundational elements - Organizational Privacy Notice
2. P1 S5 Lesson 2_Privacy Foundational elements - Organizational Privacy Policy
3. P1 S5 Lesson 3_Privacy Foundational elements - Organizational Security Policies
4. P1 S5 Lesson 4_Incident Response - Security and Privacy Perspectives
5. P1 S5 Lesson 5_System Development Lifecycle and Enterprise Architecture
6. P1 S5 Lesson 6_Privacy Impact Assessments (PIA)
7. P1 S5 Lesson 7_Common Privacy Principles
8. P1 S5 Lesson 8_Data Retention Concepts and Best Practices in GDPR context
9. One Great Enterprise Security Policy - Daimler
10. Section 5 Quiz
1. P1 S6 Lesson 1_The Collection Process - Notice
2. P1 S6 Lesson 2_The Collection Process - Choice, Control _ Consent
3. P1 S6 Lesson 3_Other topics related to Collection
4. P1 S6 Lesson 4_Use
5. P1 S6 Lesson 5_Security Practices and Limitations on Use
6. P1 S6 Lesson 6_Disclosure
7. P1 S6 Lesson 7_Retention - Records, Limitations, Access
8. P1 S6 Lesson 8_Retention - Security Considerations
9. P1 S6 Lesson 9_Destruction
10. Section 6 Quiz
1. P1 S7 Lesson 1 - Mandatory and Voluntary DPO
2. P1 S7 Lesson 2 - GDPR requirements for DPOs
3. P1 S7 Lesson 3 - A brief Summary of DPO Skills
4. P1 S7 Lesson 4 - DPO Certification
5. P1 S7 Lesson 5 - DPO Professions
6. P1 S7 Lesson 6 - DPO Hiring Errors
7. Quiz Section 7
1. P1 S8 Lesson 1 - Defining the Role_Scope
2. P1 S8 Lesson 2 - DPO Resources
3. P1 S8 Lesson 3 - Outsourcing DPO
4. P1 S8 Lesson 4 - DPO contract considerations
5. P1 S8 Lesson 5 - First Tasks of a DPO
6. P1 S8 Lesson 6 - Data Protection Policy
7. P1 S8 Lesson 7 - Data and Processing Inventory
8. Quiz Section 8
1. Part 1 S9 Lesson 1_First 100 days as DPO - general statements
2. Part 1 S9 Lesson 2_PREPARE Phase
3. Part 1 S9 Lesson 3_Assess Phase
4. Part 1 S9 Lesson 4_Plan Phase
5. Part 1 S9 Lesson 5_Act Phase
6. Part 1 S9 Lesson 6_Measure Phase
1. Part 1 S10 Lesson 1_Risk
2. Part 1 S10 Lesson 2_ISO 27005 general statements
3. Part 1 S10 Lesson 3_Risk Identification
4. Part 1 S10 Lesson 4_Risk Analysis
5. Part 1 S10 Lesson 5_Risk Evaluation
6. Part 1 S10 Lesson 6_Risk treatment
7. Part 1 S10 Lesson 7_Risk in GDPR
8. Part 1 S10 Lesson 8_DPIA-s req under GDPR
9. Part 1 S10 Lesson 9_PIA vs DPIA and Best Practices around them
1. Part 1 S11 Lesson 1_International Transfers with examples
2. Part 1 S11 Lesson 2_Adequacy Decisions
3. Part 1 S11 Lesson 3_Safeguards
4. Part 1 S11 Lesson 4_Controllers and DPOs not in the EU
5. Part 1 S11 Lesson 5_Americas Privacy Laws
6. Part 1 S11 Lesson 6_Asia Pacific privacy rules
7. Part 1 S11 Lesson 7_Other Privacy Laws
8. Part 1 S11 Lesson 8_Schrems II - General Statements
9. Part 1 S11 Lesson 9_Compliance with Schrems II
10. Part 1 S11 Lesson 10 - EU US Data Privacy Framework part 1
11. Part 1 S11 Lesson 11 - EU US Data Privacy Framework part 2
1. P1 S12 Lesson 1_Technical Assessments
2. P1 S12 Lesson 2_ISO 27001
3. P1 S12 Lesson 3_ISO controls
4. P1 S12 Lesson 4_NIST
5. P1 S12 Lesson 5_Anonymization
6. P1 S12 Lesson 6_Data Breaches
7. P1 S12 Lesson 7_Breach Response
8. P1 S12 Lesson 8_Breach Response within CSPs
9. P1 S12 Lesson 9_Determining Breach Severity
1. P1 S13 Lesson 1_Gap Assessment Tool
2. P1 S13 Lesson 2_Management Commitment
3. P1 S13 Lesson 3_Preparation Project Plan
4. P1 S13 Lesson 4_GDPR_Roles
5. P1 S13 Lesson 5_How to capture Personal Data in a Form
6. P1 S13 Lesson 6_GDPR Privacy Data Protection Policy
7. P1 S13 Lesson 7_Data Subject Request Procedure
8. P1 S13 Lesson 8_Data Protection Impact Assessment (DPIA)
9. P1 S13 Lesson 9_Data Breach and IRP
10. P1 S13 Lesson 10_ISO and GDPR
11. P1 S13 Lesson 11_Privacy by design
12. Course Challenge - Company Description
13. Course Challenge - Company Description - and Q&A
14. Challenge 1 - Requirements
1. P1 S14 Lesson 1_Customer scenario description
2. P1 S14 Lesson 2_Personal Data Analysis Form
3. P1 S14 Lesson 3_personal data flow mapping
4. P1 S14 Lesson 4_3rd party processing providers form
5. P1 S14 Lesson 5 - GDPR Assessment Report Example
6. P1 S14 Lesson 6_GDPR implementation project plan
1. P1 S15 Lesson 1_EU SME - Business details, DPO, insourcing vs outsourcing
2. P1 S15 Lesson 2_EU SME - Assessing GDPR Compliance step by step
3. P1 S15 Lesson 3_EU SME - Compliance, Technical Assessment and Privacy by Design
4. P1 S15 Lesson 4_EU SME - Data Transfers
5. P1 S15 Lesson 5_US Multinational - Business details, DPO, insourcing vs outsourcing
6. P1 S15 Lesson 6_US Multinational - Assessing GDPR Compliance step by step
7. P1 S15 Lesson 7_US Multinational - Compliance with other Obligations
8. P1 S15 Lesson 8_US Multinational - Technical Assessments and Data Breach
9. P1 S15 Lesson 9_US Multinational - Business details, DPO, insourcing vs outsourcing
10. P1 S15 Lesson 10_Chrome Browser - GDPR case study
11. P1 S15 Lesson 11_Top concerns for Hotels Online Businesses
12. P1 S15 Lesson 12_A practical Guide for Small Enterprises (SMEs)
13. P1 S15 Lesson 13_How to make a website GDPR compliant
14. P1 S15 Lesson 14_Outsourcing your DPO_real life scenarios
15. P1 S15 Lesson 15_Legal Response to Data Breaches in the Cloud
16. P1 S15 Lesson 16_Children-s Consent. Is it Legal
17. P1 S15 Lesson 17_GDPR Right to Erasure and Backup Systems
18. Challenge 2
1. P1 S16 Lesson 1_Identity _ Access Management
2. P1 S16 Lesson 2_Limitations of Access Mgmt _ Least Privilege principle
3. P1 S16 Lesson 3_UBAC _ RBAC
4. P1 S16 Lesson 4_Context of Authority
5. P1 S16 Lesson 5_Cross Site Authentication _ Authorization Models
6. P1 S16 Lesson 6_ Credit card information _ Processing
7. P1 S16 Lesson 7_PCI-DSS _ PA-DSS
8. P1 S16 Lesson 8_Remote Access _ BYOD - Privacy _ Security Considerations
9. P1 S16 Lesson 9_Remote Access _ BYOD - Access to Computers _ Architecture controls
10. P1 S16 Lesson 10_ Data Encryption - Design Considerations
11. P1 S16 Lesson 11_ Application, Record and Field Encryption
12. P1 S16 Lesson 12_File _ Disk Encryption
13. P1 S16 Lesson 13_Encryption Regulation _ Crypto Standards
14. P1 S16 Lesson 14_Other Privacy enhancing Technologies
15. P1 S16 Lesson 15_Software Notifications and Agreements
1. P1 S17 Lesson 1_Organizational Privacy Strategy for Social Media
2. P1 S17 Lesson 2_Consumer Expectations
3. P1 S17 Lesson 3_Children-s Online Privacy
4. P1 S17 Lesson 4_Social media - personal information collected
5. P1 S17 Lesson 5_Social media - personal information shared and ownership
6. P1 S17 Lesson 6_E-commerce personalization
7. P1 S17 Lesson 7_Online Advertising
8. P1 S17 Lesson 8_Key considerations when posting ADs on your website
9. P1 S17 Lesson 9_Understanding cookies, beacons and other tracking technologies
10. P1 S17 Lesson 10_Cookies-Deep Dive
11. P1 S17 Lesson 11_Web Browser Privacy and Security Features
12. Challenge 3
1. P1 S18 Lesson 1_Data Protection _ Direct Marketing
2. P1 S18 Lesson 2_The concept of Direct marketing
3. P1 S18 Lesson 3_The right to opt-out
4. P1 S18 Lesson 4_Marketing Requirements under e-Privacy Directive
5. P1 S18 Lesson 5_Postal Marketing
6. P1 S18 Lesson 6_Telephone Marketing
7. P1 S18 Lesson 7_Electronic Marketing
8. P1 S18 Lesson 8_Location Based Marketing
9. P1 S18 Lesson 9_Online Behavioral Advertising (OBA) and GDPR
1. P1 S19 Lesson 1_Overview of Subject Access Request (SAR)
2. P1 S19 Lesson 2_How to recognize a valid SAR
3. P1 S19 Lesson 3_Responding to a SAR
4. P1 S19 Lesson 4_Dealing with SARs involving other people information- part 1
5. P1 S19 Lesson 5_Dealing with SARs involving other people information- part 2
6. P1 S19 Lesson 6_Supplying information to the requester
7. P1 S19 Lesson 7_Dealing with repeated or unreasonable requests
8. P1 S19 Lesson 8_Exemptions - part 1
9. P1 S19 Lesson 9_Exemptions - part 2
10. P1 S19 Lesson 10_Exemptions - part 3
11. Challenge 4
1. P1 S20 Lesson 1 - Consent, no longer an option for HR_
2. P1 S20 Lesson 2 - Data Protection Policy (HR perspectives)
3. P1 S20 Lesson 3 - GDPR terms and how they relate to recruiting
4. P1 S20 Lesson 4- Ensure you job application process complies with GDPR
5. P1 S20 Lesson 5 - Sourcing and Attracting Candidates with GDPR in mind
6. P1 S20 Lesson 6 - Ensure your software vendors are compliant
7. P1 S20 Lesson 7 - The intersection between GDPR and Employment Contracts
8. P1 S20 Lesson 8 - GDPR and Employee Monitoring
9. P1 S20 Lesson 9 - GDPR and HR Analytics
10. Challenge 5
1. P1 S21 Lesson 1_Wireless Technology - RFID
2. P1 S21 Lesson 2_Wireless Technology - NFC, Bluetooth _ WiFi
3. P1 S21 Lesson 3_Location Based Services (LBS) - generalities
4. P1 S21 Lesson 4_Location Based Services (LBS) - GPS
5. P1 S21 Lesson 5_Location Based Services (LBS) - GIS
6. P1 S21 Lesson 6_Surveillance of Individuals
7. P1 S21 Lesson 7_Data surveillance _ Biometric recognition
8. P1 S21 Lesson 8_Video Surveillance Guidelines (part 1)
9. P1 S21 Lesson 9_Video Surveillance Guidelines (part 2)
10. Answers to Challenges
1. Part 2 S1 Lesson 1_Privacy Vision, Mission Statement and Program Scope
2. Part 2 S1 Lesson 2_Privacy Governance_9m
3. Part 2 S1 Lesson 3_Develop a Privacy Strategy_7m
4. Part 2 S1 Lesson 4_Privacy Risk Management Framework part 1
5. Part 2 S1 Lesson 5_Privacy Risk Management Framework part 2
6. Part 2 S1 Lesson 6_Engineering - High Level Design
7. Part 2 S1 Lesson 7_Engineering - Low Level Design
8. Part 2 S1 Lesson 8_Testing, Validation _ Verification
9. Part 2 S1 Lesson 9_SDLC and the Culture of Privacy
10. Part 2 S1 Lesson 10_Privacy Governance Success
11. Part 2 S1 Lesson 11_Privacy Standards - ISO 27018, ISO 27701, ISO 29100
12. Part 2 S1 Lesson 12_Structure the Privacy Team
1. Part 2 S2 Lesson 1_Records of Data Processing
2. Part 2 S2 Lesson 2_Assessing vendors and 3rd party suppliers
3. Part 2 S2 Lesson 3_Mergers and Acquisitions
4. Part 2 S2 Lesson 4_Interfacing and Communicating with an organization
5. Part 2 S2 Lesson 5_Privacy Policy _ Other types of Policies
6. Part 2 S2 Lesson 6_Measuring Privacy Program Maturity
7. Part 2 S2 Lesson 7_Privacy Metrics
8. Part 2 S2 Lesson 8_Monitoring _ Audits
9. Part 2 S2 Lesson 9_Privacy Training _ Awareness
10. Part 2 S2 Lesson 10_NIST CSF
11. Part 2 S2 Lesson 11_NIST Privacy Framework
1. Part 2 S3 Lesson 1_Risk, Exposure, Incidents and Breaches
2. Part 2 S3 Lesson 2_Incident Response Plan
3. Part 2 S3 Lesson 3_Incident Handling
4. Part 2 S3 Lesson 4_Investigation
5. Part 2 S3 Lesson 5_Reporting Obligations
6. Part 2 S3 Lesson 6_Recovering
7. Part 2 S3 Lesson 7_How malware works_
8. Part 2 S3 Lesson 8_Ransomware and the implications on privacy
9. Part 2 S3 Lesson 9_Lateral Movement and how it works
1. P2 S4 Lesson 1_Generalities
2. P2 S4 Lesson 2_Short history of adoption
3. P2 S4 Lesson 3_Principle 1 - Proactive not Reactive
4. P2 S4 Lesson 4_Principle 2 - Privacy as the Default Setting
5. P2 S4 Lesson 5_Principle 3_Privacy Embedded into Design
6. P2 S4 Lesson 6_Principle 4 - Full Functionality
7. P2 S4 Lesson 7_Principles 5, 6 and 7
8. P2 S4 Lesson 8_Challenges of the Principles
9. P2 S4 Lesson 9_Why its important to Build in Privacy
1. P2 S5 Lesson 1_What is this section about
2. P2 S5 Lesson 2_Individuals
3. P2 S5 Lesson 3_Domain-Threat Actors
4. P2 S5 Lesson 4_Relationships
5. P2 S5 Lesson 5_Example 1
6. P2 S5 Lesson 6_Example 2
7. P2 S5 Lesson 7_Example 3
8. P2 S5 Lesson 8_Violations - generalities
9. P2 S5 Lesson 9_Violations - Information collection
10. P2 S5 Lesson 10_Violations - Information processing (part 1)
11. P2 S5 Lesson 11_Violations - Information processing (part 2)
12. P2 S5 Lesson 12_Violations - Information dissemination (part 1)
13. P2 S5 Lesson 13_Violations - Information dissemination (part 2)
14. P2 S5 Lesson 14_Invasions
15. P2 S5 Lesson 15_Controls_System Architecture_Centralization
16. P2 S5 Lesson 16_Controls_System Architecture_Identifiability
1. P2 S6 Lesson 1_Privacy Data-Oriented Strategies - SEPARATE
2. P2 S6 Lesson 2_Privacy Data-Oriented Strategies - MINIMIZE (part 1)
3. P2 S6 Lesson 3_Privacy Data-Oriented Strategies - MINIMIZE (part 2)
4. P2 S6 Lesson 4_Privacy Data-Oriented Strategies - HIDE
5. P2 S6 Lesson 5_Privacy Data-Oriented Strategies - ABSTRACT
6. P2 S6 Lesson 6_Privacy Data-Oriented Strategies - ENFORCE
7. P2 S6 Lesson 7_Privacy Data-Oriented Strategies - DEMONSTRATE
8. P2 S6 Lesson 8_Privacy Data-Oriented Strategies - INFORM
9. P2 S6 Lesson 9_Privacy Data-Oriented Strategies - CONTROL
10. P2 S6 Lesson 10_Privacy Data-Oriented Strategies - Architecture Redux
11. P2 S6 Lesson 11_Information Flow
12. P2 S6 Lesson 12_Domains and Subdomains
13. P2 S6 Lesson 13_The city pothole app example
14. Section Exercises
1. P2 S7 Lesson 1_Risk Analysis
2. P2 S7 Lesson 2_A FaIR method for privacy risk
3. P2 S7 Lesson 3_Frequency
4. P2 S7 Lesson 4_Vulnerability
5. P2 S7 Lesson 5_Magnitude
6. P2 S7 Lesson 6_Applying controls (part 1)
7. P2 S7 Lesson 7_Applying controls (part 2)
8. P2 S7 Lesson 8_Organizational Risk
9. P2 S7 Lesson 9_Quantifying Risk - example 1 (part 1)
10. P2 S7 Lesson 10_Quantifying Risk - example 1 (part 2)
11. P2 S7 Lesson 11_Pothole App Example
12. Section Exercises
1. P2 S8 Lesson 1_Identify the Purpose
2. P2 S8 Lesson 2_Understand Quality Attributes
3. P2 S8 Lesson 3_Identify Information Needs
4. P2 S8 Lesson 4_Imposing Controls - ARCHITECT _ SECURE
5. P2 S8 Lesson 5_Imposing Controls - Supervise _ Balance
6. P2 S8 Lesson 6_Online Behavioral Advertising _ Mobile Phone monitoring
7. P2 S8 Lesson 7_Integrating privacy by design into the business
8. P2 S8 Lesson 8_How the methodology meets the principles
9. P2 S8 Lesson 9_The pothole App under the methodology
10. Section Final Exercises
1. P3 S1 L1 How i started my career
2. P3 S1 L2 My Career in one Lesson
3. P3 S1 L3 Money Heist
4. P3 S1 L4 You are what your brains thinks about you
5. P3 S1 L5 Why companies will choose you
6. P3 S1 L6 How important is your resume
7. P3 S1 L7 Be Diverse!
8. P3 S1 L8 The role of Luck in your Career
9. P3 S1 L9 How much time you should spend in a company
10. P3 S1 L10 What takes you down in a company
11. P3 S1 L11 Certifications
1. P3 S2 L1 Where to get started
2. P3 S2 L2 Learning and Background
3. P3 S2 L3 Transitioning into Privacy
4. P3 S2 L4 Privacy Job roles on the market
5. P3 S2 L5 What certifications will make an impact
6. P3 S2 L6 Technologies related to privacy
7. P3 S2 L7 Data Classification, DLP and RMS
8. P3 S2 L8 Database Activity Monitoring - DAM
9. P3 S2 L9 Encryption, HSMs, cloud relationship
10. P3 S2 L10 Consent and Cookie Mgmt
1. P3 S3 Lesson 1_CIPP E questions part 1
2. P3 S3 Lesson 2_CIPP E questions part 2
3. P3 S3 Lesson 3_CIPP E questions part 3
4. P3 S3 Lesson 4_Read Chapter 1 and 2 for CIPP E exam
5. P3 S3 Lesson 5_CIPM questions part 1
6. P3 S3 Lesson 6_CIPM questions part 2
7. P3 S3 Lesson 7_CIPM questions part 3
8. P3 S3 Lesson 8_CIPM review before the exam
9. P3 S3 Lesson 9_CIPT questions part 1
10. P3 S3 Lesson 10_CIPT questions part 2
11. P3 S3 Lesson 11_CIPT questions part 3
1. P3 S4 L1_Elevator Pitch
2. P3 S4 L2_My resume explained - Director role Part 1
3. P3 S4 L3_My resume explained Director role Part 2
4. P3 S4 L4 DPO Role CV writing exercise
5. P3 S4 L5 Privacy Consultant role - CV writing exercise
6. P3 S4 L6 Privacy Manager role - CV writing exercise
7. P3 S4 L7 Privacy Engineer role - CV writing exercise
8. P3 S4 L8 What exactly do you want
9. P3 S4 L9 The Barriers of Thinking Big
10. P3 S4 L10 How to acquire a higher role or salary increase
11. P3 S4 L11 The interview Process
12. P3 S4 L12 How to do the follow-up
13. P3 S4 L13 How to create the counter offer
14. P3 S4 L14 Linkedin
15. P3 S4 L15 Big Corporations - Traps and What to do
16. P3 S4 L16 HR is important - what you need to know?
1. P4 S1 Lesson 1_CCPA General Statements
2. P4 S1 Lesson 2_Who and What Data to protect
3. P4 S1 Lesson 3_Who must comply
4. P4 S1 Lesson 4_How to comply _ exceptions
5. P4 S1 Lesson 5_Compliance Strategies
6. P4 S1 Lesson 6_How to comply - HR Processes
7. P4 S1 Lesson 7_Penalties and Enforcement Mechanisms
8. P4 S1 Lesson 8_Not all records count
1. P4 S2 Lesson 1_CCPA Privacy Notices
2. P4 S2 Lesson 2_Collectors of Personal information
3. P4 S2 Lesson 3_Transfers to 3rd party
4. P4 S2 Lesson 4_Ambiguities and Takeaways
1. P4 S3 Lesson 1_Verifiable requests
2. P4 S3 Lesson 2_Substantive Response
3. P4 S3 Lesson 3_Categories of personal information, response timing and methods
1. P4 S4 Lesson 1_Right of Erasure
2. P4 S4 Lesson 2_Objection to Sale and the Do not Sell Button
3. P4 S4 Lesson 3_Non-discrimination
4. P4 S4 Lesson 4_Deidentification, Pseudonymisation _ Aggregation
1. P4 S5 Lesson 1_Statutory Damages for Data Security Breaches
2. P4 S5 Lesson 2_Elements of a Claim, Sanctions and Remedies
3. P4 S5 Lesson 3_Impact on Companies
4. P4 S5 Lesson 4_Data Security Requirements for Manufacturers
1. P4 S6 Lesson 1_ General thoughts
2. P4 S6 Lesson 2_Personal Scope
3. P4 S6 Lesson 3_Territorial Scope
4. P4 S6 Lesson 4_Material Scope
5. P4 S6 Lesson 5_Personal data - GDPR vs CCPA
6. P4 S6 Lesson 6_Pseudonymisation
7. P4 S6 Lesson 7_Controllers and Processors
8. P4 S6 Lesson 8_Children
9. P4 S6 Lesson 9_Research
10. P4 S6 Lesson 10_Right to erasure
11. P4 S6 Lesson 11_Right to be informed
12. P4 S6 Lesson 12_Right to object (right to opt out)
13. P4 S6 Lesson 13_Right of access
14. P4 S6 Lesson 14_Right not be subject to discrimination for the exercise of rights
15. P4 S6 Lesson 15_Right to data portability
16. P4 S6 Lesson 16_Monetary penalties
17. P4 S6 Lesson 17_Supervisory Authority
18. P4 S6 Lesson 18_Civil remedies for individuals
1. P4 S7 Lesson 1_CCPA and Advertising Technology
2. P4 S7 Lesson 2_CCPA and Retail
3. P4 S7 Lesson 3_CCPA and Financial institutions
4. P4 S7 Lesson 4_GLBA and FCRA exemptions
5. P4 S7 Lesson 5_CCPA and the medical industry (part 1)
6. P4 S7 Lesson 6_CCPA and the medical industry (part 2)
7. P4 S7 Lesson 7_CCPA and IoT
8. P4 S7 Lesson 8_Use Case Scenario - Connected vehicles (part 1)
9. P4 S7 Lesson 9_Use Case Scenario - Connected vehicles (part 2)
10. P4 S7 Lesson 10_Use Case Scenario - Connected vehicles (part 3)
11. P4 S7 Lesson 11_CCPA in business 2 business context
1. P4 S8 Lesson 1_Short review with some real examples
2. P4 S8 Lesson 3_Amendments from October 2019 (part 1)
3. P4 S8 Lesson 4_Amendments from October 2019 (part 2)

About this course

€247,00
425 lessons
37.5 hours of video content

Bonus material

A new way of learning data privacy!

Certification Preparation
$300 value
Get ready for CIPT, CIPM and CIPP/E with a single course
Templates and Exercises
$500 value
200+ templates that you can reuse, 10 complex challenges and exercises to solve, Section Quizes and much more
ISO Standards
$650 value
ISO standards templates value 650 EUR (29100, 27701, 27018, 31000)

What you will learn

You will master all the technical and regulatory concepts needed to start your Cyber and/or Privacy role, with a focus on GDPR.

This comes with real world examples and scenarios, but also with more than 200 templates that you can reuse in your new role.

You will understand the components needed to run a Privacy program, including Privacy Vision, Mission, Engineering, Governance, Privacy by Design, Privacy Frameworks and Standards, Incident Response and Data Models.

You will learn how to slowly move to a privacy role without real experience, how to build your VALUE in the resume and actually paint that picture to the employers and in the end, how to run the corporate world in order to successfully transition to a higher role as fast as possible and become one of the greatest privacy professionals in the world that every company would want to hire

How to make privacy operational by using technology
GDPR and CCPA compliance and implementation
Privacy in Information Lifecycle
Privacy in Systems and Applications
DPO role explained – step by step
How to perform gap assessments, implementations and privacy consultancy services using templates
Online Privacy Issues
Privacy related to Direct Marketing, SARs
How to Transition into Privacy and how to move faster in the Corporate World (my real life experience)
Advanced Privacy by Design techniques

Instructor(s)

Roland Costea

[email protected]

My name is Roland Costea and I am working as Chief Security Officer at SAP .

Before that i have spent years working for Microsoft, IBM, Genpact, Cognizant or Accenture as a Privacy & Security Director being able to create hundreds of integrated security & privacy programmes for top organizations in the world and I have decided to put all my experience together in a single comprehensive course, to show how to actually make Data Privacy operational and most importantly how to think out of the box.

I have been involved in engineering privacy for a lot of industries including Automotive (Mercedes-Benz, Geely, Volvo) and also provided DPO as a service for several other top companies in Europe and US.

I have worked and developed the privacy strategy for Microsoft & IBM for the whole Central & Eastern Europe and also drived Cognizant Security & Privacy business in DACH.

What I currently still see, is a lot of people coming with the law background that focus only on learning GDPR regulation, how to apply it, what are the tricks in there, but without being open to have a technology mindset or learn what are the challenges in technology so that they can easily or better deal with these teams. Viceversa is also there, in lower percentages, when people with technology mindsets, come and develop more regulatory skillsets in order to complement or better suit their day by day job.

All these skills, should represent the privacy expert, specialist or leader of TODAY and this is what i am teaching at Defradar. How to become the greatest version of yourself that every company will battle for when they want to hire in Privacy and/or Cybersecurity.

Are you ready for this transformational journey?

Are you looking for a career change into Data Privacy? Come join us and become one of the greatest privacy professionals in the world.

Lessons by Roland Costea, CISO at SAP ex. Microsoft, IBM, Accenture, Cisco, Cognizant, Genpact

Enroll today

Part 1 - Section 1 - Introduction

Part 1 - Section 2 - Privacy & Security - General Statements

Part 1 - Section 3 - European Data Protection Law and Regulation - GDPR

PART 1 - Section 4 - Understanding the need for privacy in the IT environment (CIPT)

Part 1 Section 5 - Core Privacy Concepts (CIPT)

PART 1 - Section 6 - Privacy considerations in the information lifecycle

PART 1 - Section 7 - Introduction to the DPO role

PART 1 - Section 8 - Initiating the DPO role

Part 1 - Section 9 - The first 100 days of a DPO

PART 1 - Section 10 - DPO Tasks - Risk and DPIAs

PART 1 - Section 11 - DPO Tasks - Outside the EU (Schrems II)

PART 1 - Section 12 - DPO Tasks - Technical Assessments

PART 1 - Section 13 - GDPR implementation - short intro Guide

PART 1 - Section 14 - Step by Step Customer GDPR Assessment

PART 1 - Section 15 - From Small & Medium Enterprise (SME) to Multinational examples (GDPR perspective)

PART 1 - Section 16 - Privacy in Systems and Applications (CIPT)

PART 1 - Section 17 - Online Privacy Issues (GDPR perspective)

PART 1 - Section 18 - Direct Marketing (GDPR perspective)

PART 1 - Section 19 - Subject Access Requests (SAR) - Code of Practice (GDPR perspective)

PART 1 - Section 20 - Lawful processing of HR data (GDPR perspective)

PART 1 - Section 21 - Technologies with Privacy Considerations

PART 2 - Section 1 - Introduction to Privacy Management, Governance & Engineering

PART 2 - Section 2 - Let's make privacy operational

Part 2 - Section 3 - Incident Response

PART 2 - Section 4 - What is Privacy by Design?

PART 2 - Section 5 - Privacy Model - Overview

PART 2 - Section 6 - Privacy Model - Data Oriented Strategies

PART 2 - Section 7 - Privacy Analysis

PART 2 - Section 8 - Privacy Methodology

PART 3 - Section 1 - My Experience & Story on your table

PART 3 - Section 2 - Transitioning into PRIVACY

PART 3 - Section 3 - Passing IAPP exams: CIPP E, CIPM, CIPT

PART 3 - Section 4 - Let's Build your Value under the Resume

PART 4 - Section 1 - California Consumer Privacy Act (CCPA) Overview

PART 4 - Section 2 - Drafting a Privacy Policy under CCPA

PART 4 - Section 3 - CCPA: How to respond to Consumer's Access Request

PART 4 - Section 4 - CCPA: What are the Consumer Rights?

PART 4 - Section 5 - CCPA: How to Notify on Data Security Breaches

PART 4 - Section 6 - GDPR and CCPA - differences and similarities

Part 4 Section 7 - CCPA Real World Scenarios

Part 4 Section 8 - CCPA Ammendments and Review

About this course

Certification Preparation

Templates and Exercises

ISO Standards