Оглавление
European Institute of Management and Finance (EIMF). Privacy & Data Protection Practitioner Courseware - English
Colofon
About the Courseware
Other publications by Van Haren Publishing
About the Author
Table of content
Self-Reflection of understanding Diagram
Timetable
1. Introduction
2. Assignment 1: Construct a Data privacy breach response plan and handle a personal data breach. Background
Your assignment
Recommended time
Expected results
Assessment criteria for the assignment
Assignment 1 Checklist
3. Assignment 2: Controller, Processor and Data Protection Officer. Background
Your assignment
Recommended time
Expected results
Assessment criteria for the exercise
Assignment 2 Checklist
4. Assignment 3: Executing a DPIA: Outsourcing of personal data processing. Background
Your Assignment
Recommended time
Expected Results
Assessment criteria for the assignment
Assignment 3 Checklist
5. Evaluation
6. e-CF competences for EXIN Privacy and Data Protection Practitioner
Introduction
Sample exam. 1 / 40. Appendix 22243 GDPR may be used when applicable
2 / 40. Appendix 22243 GDPR may be used when applicable
3 / 40. Appendix 22243 GDPR may be used when applicable
4 / 40. Appendix 22243 GDPR may be used when applicable
5 / 40. Appendix 22243 GDPR may be used when applicable
6 / 40. Appendix 22243 GDPR may be used when applicable
7 / 40. Appendix 22243 GDPR may be used when applicable
8 / 40. Appendix 22243 GDPR may be used when applicable
9 / 40. Appendix 22243 GDPR may be used when applicable
10 / 40. Appendix 22243 GDPR may be used when applicable
11 / 40. Appendix 22243 GDPR may be used when applicable
12 / 40. Appendix 22243 GDPR may be used when applicable
13 / 40. Appendix 22243 GDPR may be used when applicable
14 / 40. Appendix 22243 GDPR may be used when applicable
15 / 40. Appendix 22243 GDPR may be used when applicable
16 / 40. Appendix 22243 GDPR may be used when applicable
17 / 40. Appendix 22243 GDPR may be used when applicable
18 / 40. Appendix 22243 GDPR may be used when applicable
19 / 40. Appendix 22243 GDPR may be used when applicable
20 / 40. Appendix 22243 GDPR may be used when applicable
21 / 40. Appendix 22243 GDPR may be used when applicable
22 / 40. Appendix 22243 GDPR may be used when applicable
23 / 40. Appendix 22243 GDPR may be used when applicable
24 / 40. Appendix 22243 GDPR may be used when applicable
25 / 40. Appendix 22243 GDPR may be used when applicable
26 / 40. Appendix 22243 GDPR may be used when applicable
27 / 40. Appendix 22243 GDPR may be used when applicable
28 / 40. Appendix 22243 GDPR may be used when applicable
29 / 40. Appendix 22243 GDPR may be used when applicable
30 / 40. Appendix 22243 GDPR may be used when applicable
31 / 40. Appendix 22243 GDPR may be used when applicable
32 / 40. Appendix 22243 GDPR may be used when applicable
33 / 40. Appendix 22243 GDPR may be used when applicable
34 / 40. Appendix 22243 GDPR may be used when applicable
35 / 40. Appendix 22243 GDPR may be used when applicable
36 / 40. Appendix 22243 GDPR may be used when applicable
37 / 40. Appendix 22243 GDPR may be used when applicable
38 / 40. Appendix 22243 GDPR may be used when applicable
39 / 40. Appendix 22243 GDPR may be used when applicable
40 / 40. Appendix 22243 GDPR may be used when applicable
Answer key. 1 / 40. Appendix 22243 GDPR may be used when applicable
2 / 40 Appendix 22243 GDPR may be used when applicable
3 / 40. Appendix 22243 GDPR may be used when applicable
4 / 40. Appendix 22243 GDPR may be used when applicable
5 / 40. Appendix 22243 GDPR may be used when applicable
6 / 40. Appendix 22243 GDPR may be used when applicable
7 / 40. Appendix 22243 GDPR may be used when applicable
8 / 40. Appendix 22243 GDPR may be used when applicable
9 / 40. Appendix 22243 GDPR may be used when applicable
10 / 40. Appendix 22243 GDPR may be used when applicable
11 / 40. Appendix 22243 GDPR may be used when applicable
12 / 40. Appendix 22243 GDPR may be used when applicable
13 / 40. Appendix 22243 GDPR may be used when applicable
14 / 40. Appendix 22243 GDPR may be used when applicable
15 / 40. Appendix 22243 GDPR may be used when applicable
16 / 40. Appendix 22243 GDPR may be used when applicable
17 / 40. Appendix 22243 GDPR may be used when applicable
18 / 40. Appendix 22243 GDPR may be used when applicable
19 / 40. Appendix 22243 GDPR may be used when applicable
20 / 40. Appendix 22243 GDPR may be used when applicable
21 / 40. Appendix 22243 GDPR may be used when applicable
22 / 40. Appendix 22243 GDPR may be used when applicable
23 / 40. Appendix 22243 GDPR may be used when applicable
24 / 40. Appendix 22243 GDPR may be used when applicable
25 / 40. Appendix 22243 GDPR may be used when applicable
26 / 40. Appendix 22243 GDPR may be used when applicable
27 / 40. Appendix 22243 GDPR may be used when applicable
28 / 40. Appendix 22243 GDPR may be used when applicable
29 / 40. Appendix 22243 GDPR may be used when applicable
30 / 40. Appendix 22243 GDPR may be used when applicable
31 / 40. Appendix 22243 GDPR may be used when applicable
32 / 40. Appendix 22243 GDPR may be used when applicable
33 / 40. Appendix 22243 GDPR may be used when applicable
34 / 40. Appendix 22243 GDPR may be used when applicable
35 / 40. Appendix 22243 GDPR may be used when applicable
36 / 40. Appendix 22243 GDPR may be used when applicable
37 / 40. Appendix 22243 GDPR may be used when applicable
38 / 40. Appendix 22243 GDPR may be used when applicable
39 / 40. Appendix 22243 GDPR may be used when applicable
40 / 40. Appendix 22243 GDPR may be used when applicable
Evaluation
1. Overview
Scope
Summary
Context
Target group
Requirements for certification
Examination details
Bloom level
Training. Contact hours
Indication study effort
Training providers
2. Exam requirements
3. List of Basic Concepts
4. Literature
Exam literature
Comment
Additional literature
Comment
Literature reference
Comment
1 Introduction
2 Designation of a DPO. 2.1. Mandatory designation
2.1.1 ‘PUBLIC AUTHORITY OR BODY’
2.1.2 ‘CORE ACTIVITIES’
2.1.3 ‘LARGE SCALE’
2.1.4 ‘REGULAR AND SYSTEMATIC MONITORING’
2.1.5 SPECIAL CATEGORIES OF DATA AND DATA RELATING TO CRIMINAL CONVICTIONS AND OFFENCES
2.2. DPO of the processor
2.3. Designation of a single DPO for several organisations
2.4. Accessibility and localisation of the DPO
2.5. Expertise and skills of the DPO
2.6. Publication and communication of the DPO’s contact details
3 Position of the DPO. 3.1. Involvement of the DPO in all issues relating to the protection of personal data
3.2. Necessary resources
3.3. Instructions and ‘performing their duties and tasks in an independent manner’
3.4. Dismissal or penalty for performing DPO tasks
3.5. Conflict of interests
4 Tasks of the DPO. 4.1. Monitoring compliance with the GDPR
4.2. Role of the DPO in a data protection impact assessment
4.3. Cooperating with the supervisory authority and acting as a contact point
4.4. Risk-based approach
4.5. Role of the DPO in record-keeping
5 ANNEX - DPO GUIDELINES: WHAT YOU NEED TO KNOW
Designation of the DPO. 1 Which organisations must appoint a DPO?
2 What does ‘core activities’ mean?
3 What does ‘large scale’ mean?
4 What does ‘regular and systematic monitoring’ mean?
5 Can organisations appoint a DPO jointly? If so, under what conditions?
6 Where should the DPO be located?
7 Is it possible to appoint an external DPO?
8 What are the professional qualities that the DPO should have?
Position of the DPO. 9 What resources should be provided to the DPO by the controller or the processor?
10 What are the safeguards to enable the DPO to perform her/his tasks in an independent manner? What does ‘conflict of interests’ mean?
Tasks of the DPO. 11 What does ‘monitoring compliance’ mean?
12 Is the DPO personally responsible for non-compliance with data protection requirements?
13 What is the role of the DPO with respect to data protection impact assessments and records of processing activities?
I. Introduction
II. Scope of the Guidelines
III. DPIA: the Regulation explained
A. What does a DPIA address? A single processing operation or a set of similar processing operations
B. Which processing operations are subject to a DPIA? Apart from exceptions, where they are “likely to result in a high risk”
C. What about already existing processing operations? DPIAs are required in some circumstances
D. How to carry out a DPIA?
E. When shall the supervisory authority be consulted? When the residual risks are high
IV. Conclusions and recommendations
