Module 1: Introduction to Privacy Programme Management
Explore the main responsibilities associated with managing a privacy programme and examine the importance of accountability within privacy programme management.
Module 2: Privacy Governance
Examine the key considerations involved in developing and implementing an organisational privacy programme, including:
- The position of the privacy function within the organisation
- The role of the DPO
- Privacy programme scope and charter
- Development of a privacy strategy
- Support and continued involvement of key organisational functions
- Privacy frameworks
Module 3: Applicable Laws and Regulations
Explore the regulatory environment surrounding privacy management, including common elements found across different jurisdictions and approaches for aligning regulatory compliance with organisational strategy.
Module 4: Data Assessments
Examine practical processes used to understand, document and assess personal data across an organisation, including:
- Creating and using data inventories and data maps
- Gap analysis
- Privacy assessments
- Privacy Impact Assessments (PIAs)
- Data Protection Impact Assessments (DPIAs)
- Vendor assessments
Module 5: Policies
Review common types of privacy-related policies, their key components and practical strategies for implementing them effectively across an organisation.
Module 6: Data Subject Rights
Explore the operational considerations involved in communicating, supporting and fulfilling data subject rights. Topics include:
- Privacy notices
- Choice and consent
- Access and rectification
- Data portability
- Erasure and the right to be forgotten
Module 7: Training and Awareness
Explore strategies for developing and implementing effective privacy training and awareness programmes throughout an organisation.
Module 8: Protecting Personal Information
Examine a holistic approach to protecting personal information and consider how Privacy by Design principles can be incorporated into privacy management practices.
Module 9: Data Breach Incident Plans
Review how organisations can prepare for data security incidents and personal data breaches. This module examines both incident planning and approaches to responding when a security incident or breach occurs.
Module 10: Measuring, Monitoring and Auditing Programme Performance
Explore common practices used to assess the ongoing effectiveness of a privacy programme, including:
- Performance monitoring
- Measurement approaches
- Analysis of programme performance
- Privacy programme auditing
This module considers how privacy programmes can be managed as ongoing, measurable activities rather than simply being established as one-time compliance initiatives.