Vocational Training Course on Privacy and Online Personal Data Management

At the end of May 2018, the Community Regulation on Privacy comes into force and it will force companies and boards to comply with the new provisions and, among others, to arrange a basic training for the staff responsible for handling personal data.
This provision – by explicit prohibition established in article 32 – does not allow for the performance of data treatment activities people who were not previously specifically instructed and trained.
Among the novelties introduced by this Regulation there is a substantial revision of the administrative and financial penalties that will be calculated based on the turnover level of those who infringe the laws currently in force.
Seen the very wide amount of people to be trained as regards these regulations, an optimal solution would be a multimedia course divided into “pills”, that, possibly, may be watched on a smartphone, tablet or personal computer and allow for acquiring the needed knowledge also outside the office, taking advantage of short breaks or even of trips on public transports, thus speeding up the training process.
To this end, we realized an educational product,

• including forty-seven short lessons, divided into nine training modules,
• supplemented by preparatory tests administered at the end of each module,
• completed by a final exam,
• aimed at awarding the learner a certificate and at the acknowledgement of 2 university training credits (ECTS)

The course brochure
With the purpose of having a demo of the content of the multimedia course there is the possibility of watching lesson nr. 8 free and downloading the related teaching material in PDF format.

Demo lesson

Target learners and requirements
The minimal requirement to be admitted to the course is holding a high school degree.

The course program

1. Didactic module: “THE EUROPEAN REGULATION 679/2016”
   1. Regulatory evolution in the field of data confidentiality
   2. Introduction to the European Regulation
   3. Basic principles of the European Regulation
   4. Personal data, profiling and pseudonymisation
   5. Data processing operations

2. Didactic module: “THE SUBJECTS OF THE DATA TREATMENT”

2. 6. Controller, processor and representative
   7. Responsibilities of the controller, of the joint controllers and of the representative
   8. Duties of the controller: privacy by design and privacy by default
   9. The data processor
   10. Agreement between controller and processor
   11. Duties and tasks of the processor
   12. The record of the treatment activities
   13. Appointment and responsibility of the «D.P.O.»
   14. Positioning and tasks of the «D.P.O.»

3. Didactic module: “SUPERVISORY THIRD PARTIES”

3. 15. Independent supervisory authority
   16. Competencies and duties of the supervisory authority
   17. Power of the Supervisory authority
   18. The European Data Protection Board
   19. The duties of the European Board

4. Didactic module “INFORMATION AND CONSENT”

4. 20. Information for the concerned people 
   21. Information for data collected at the concerned people’s site
   22. Information for data collected at third parties’ site
   23. The consent of the concerned people

5. Didactic module “PARTICULAR DATA, WORK RELATIONSHIPS AND VIDEO SURVEILLANCE”

5. 24. The treatment of “particular” personal data
   25. Sensitive data treated in the work relationship
   26. Health data, timecards and notice boards in the workplace
   27. Remote control on workers
   28. Video surveillance systems

6. Didactic module “RIGHSTS OF THE CONCERNED PERSON”

6. 29. Right of access to personal data
   30. Right to rectification and to erasure
   31. Right to restriction, notifications to the concerned person and data portability
   32. Right to object and automated procedures
   33. Restriction to the obligations of processing

7. Didactic module “SECURITY OF PERSONAL DATA”

7. 34. Security measures for companies and boards
   35. Security measures for people in charge
   36. Data breach: notification to the Controller and to the concerned people
   37. Assessing the impact of technologies on data protection
   38. Prior notification to the controller

8. Didactic module “CODES OF CONDUCT, CERTIFICATIONS AND TRANSFERRING DATA ACROSS BORDERS”

8. 39. Codes of conduct
   40. The approval of the codes of conduct
   41. Monitoring of the codes of conduct
   42. Certifications
   43. Certification boards
   44. Data transfer to Third Countries

9. Didactic module “CLAIMS AND SANCTIONS”

9. 45. Tools to complain
   46. Right to compensation and responsibilities
   47. Sanctioning system

Information and enrollment
For more information, please send an e-mail to: info@uninettunouniversity.net.

Participation fees
200.00 Euro