Course content

 

The ECPC-G course package builds on the standard ECPC-B Professional DPO Certification and further equips participants to apply data protection principles globally, rather than just relying solely on the General Data Protection Regulation (GDPR).

The course is designed around eight topical modules:

  1. What is a Global Privacy Officer (GPO): Description, statutory requirements, desirable professional qualities, critical responsibilities and cooperation and coordination with the legal department and the CISO.
  2. International legal framework (Convention 108, OECD Privacy Guidelines, APEC Privacy Framework)
  3. Foundational Principles of Data Protection Law: key concepts & principles, legal basis of processing, different approaches to consent, fair and transparent processing, data security (basic) and retention.
  4. Individual Rights: focus on access, correction, deletion, but with attention for other rights that exist around the world (profiling, do not sell, portability, right to be forgotten, etc.)
  5. International Data Flows: what constitutes a data transfer, the concept of adequacy around the world, contractual safeguards and other transfer mechanisms (including onward transfers challenges).
  6. Contracts: data protection in contracts, processing agreements, consent mechanisms, etc.
  7. Confidentiality and Integrity: technical and organisational measures; data security and breaches, incident response plan in global operations.
  8. Accountability: building a privacy management program to support compliance with privacy laws around the world, including documentation requirements. To what extent you can run a global one-size-fits-all service, and what features must be localised?

 

The first two modules will provide a worldwide overview of the legal framework and tasks of a Global Privacy Officer. The remaining six modules will cover the fundamentals and key features of data protection laws in the following countries, with a focus on how they differ from the GDPR:

  •  United States (CCPA - California’s Consumer Privacy Act & CPRA - The California Privacy Rights Act)
  • Brazil (LGPD – Data Protection Law)
  • Kenya (Kenya Data Protection Act)
  • Canada (PIPEDA- Data Protection Law & CPPA)
  • India (PBDP – Personal Data Protection Bill)
  • Japan (APPI - Act on the Protection of Personal Information)

     

  • China (PIPL - Personal Information Protection Law)
  • UK
ECPC course content globe

The ECPC-G Certification offers a global outlook on the data protection laws, helping professionals in the field to be compliant in a global economy and in multiple jurisdictions.

ECPC course content worldmap

Learning objectives

By the end of the training, participants will have a sound understanding of data protection, privacy and data security rules worldwide, as well as the practical knowledge needed to support global compliance and reduce the risk of non-compliance.

 

Learning Methodology and Trainers

Our training courses are driven by practical examples and interactive cases based on real-life scenarios. By using this methodology, participants learn:

how to recognise the issues of most importance to their business/organisations; 
how to set up a risk-based, sustainable and effective protection compliance programme and; 
how to draft privacy policies and procedures.

A large part of the course content will be delivered by experts on privacy, data protection and data security with experience in working across many countries, industries and business positions.

 

Who should attend

This course is open to participants who have already obtained a professional DPO certificate; the Maastricht University ECPC-B DPO Certificate, or an equivalent DPO certification (40 hours training). It is designed for professionals with a background in data protection, privacy, law, or information security who are seeking to earn a Global Privacy Officer Certification. This training is ideal for: Data Protection Officers (DPOs), security officers, compliance officers, HR, IT, and marketing professionals who handle personal data on a global scale.

This course combines best-practice examples with a high level of interactivity to provide participants with the perfect expert practical knowledge and solutions for tackling the global data protection compliance issues.