Skip to main content
Skills course

Privacy Operations in Practice: Records, DPIAs and Data Subject Requests

Learn to run the privacy work day to day: records of processing, impact assessments, data subject requests, breach response, and vendors and transfers.

  • Format Online, self-paced
  • Scope 5 modules and a capstone
  • Duration About 8 h
  • Cost Quote on request

About this course

The course covers records of processing and data mapping, data protection impact assessments, data subject requests within the deadline, breach response, and vendors and transfers. The capstone is a privacy operations toolkit.

  • Practice on real tasks and an applied assignment
  • Graded final assessment

A certificate that lists the skills is issued when the final assessment is passed and the applied assignment is submitted.

Content

  1. Module 1

    Records of Processing and Data Mapping

  2. Module 2

    Data Protection Impact Assessments

  3. Module 3

    Data Subject Requests

  4. Module 4

    Breach Response

  5. Module 5

    Vendors and Transfers

  6. Module 6

    Capstone: A Privacy Operations Toolkit

Who it is for

  • Privacy, IT and legal staff
  • Privacy career-changers

Fee and registration

Quote on request

Price Tell us which Skills courses and how many learners, and we send you a quote. Larger orders get volume pricing, and there is no minimum purchase.
Quoted on request
What a license covers Any license can be used on any Skills course: you choose the course when you assign it to a named learner.
One learner on one Skills course
What you need Skills course licenses sit on top of user licenses: a learner has to be a user on the platform.
A TechClass subscription
Access A license is used when it is assigned, whether or not the learner finishes. Unused licenses stay valid for 12 months from purchase.
12 months from assignment

How to get started

  1. Request a quote

    Tell us the Skills courses and the number of learners. We come back with a quote for the licenses and can walk you through the courses in a demo.

  2. Add your people

    Every learner needs a user license on TechClass. Skills course licenses are added on top.

  3. Assign a license to each learner

    Your admin assigns a license from the pool to each named learner on this course. The learner then has 12 months to complete it, at their own pace.

Education organizations and continuous learning departments: a plan of their own, paid per completion and with learner support, is in preparation. Contact us to discuss your program.

Request a quote
Questions, answered

Privacy Operations in Practice: Records, DPIAs and Data Subject Requests FAQ

Per learner, per course. You buy Skills course licenses as a pool, on top of your user licenses, and your admin assigns one to a named learner on whichever Skills course they need. A license is used when it is assigned, whether or not the learner finishes.

Skills course licenses are quoted on request. Tell us which courses and how many learners you have in mind, and we send you a quote. Larger orders get volume pricing, and there is no minimum purchase.

Yes, with one license for each course. Licenses come from the same pool, so any license can be assigned to any Skills course, and all the licenses in one order count towards the volume price.

About 8 hours of guided learning, in modules, at the learner's own pace. Access lasts 12 months from the day the license is assigned.

Yes. A certificate that lists the skills is issued when the final assessment is passed and the applied assignment has been submitted.

A piece of real work that puts the skills to use. An employee does it on their own job and team; a learner without a suitable workplace does it on a provided case company. The learner checks it against a rubric, and a manager can review it.

No. Every Skills course stands on its own and restates what it relies on, so a learner can start with it directly.

The course is the same for companies and education organizations. A plan for continuous learning departments, paid per completion and with learner support, is in preparation.

English, at this stage.

Compliance

Interested in Privacy Operations in Practice: Records, DPIAs and Data Subject Requests?

Learn to run the privacy work day to day: records of processing, impact assessments, data subject requests, breach response, and vendors and transfers.

Full table of contents

Privacy Operations in Practice: Records, DPIAs and Data Subject Requests

6 modules · 20 sections

Module 1 Records of Processing and Data Mapping

  1. 1.1 What Art. 30 requires
  2. 1.2 Building a data map
  3. 1.3 Retention schedules
  4. 1.4 Keeping the records current

Module 2 Data Protection Impact Assessments

  1. 2.1 When a DPIA is required (Art. 35)
  2. 2.2 Running one, step by step
  3. 2.3 Consulting the DPO, and the supervisory authority (Art. 36)
  4. 2.4 Data protection by design and by default (Art. 25)

Module 3 Data Subject Requests

  1. 3.1 Verifying identity
  2. 3.2 The one-month deadline and extensions (Art. 12(3))
  3. 3.3 Responding
  4. 3.4 Difficult cases: third-party data, excessive requests and refusals

Module 4 Breach Response

  1. 4.1 Assessing a breach
  2. 4.2 The 72-hour notification (Art. 33)
  3. 4.3 Informing individuals (Art. 34)
  4. 4.4 The breach register and lessons learned

Module 5 Vendors and Transfers

  1. 5.1 Processor agreements (Art. 28)
  2. 5.2 Vendor due diligence and audits
  3. 5.3 Transfer tools, such as Standard Contractual Clauses and the EU–US Data Privacy Framework
  4. 5.4 Working with the DPO and reporting to management

Module 6 Capstone: A Privacy Operations Toolkit