KNOWLEDGE OBJECTIVES:

• Understand the fundamental principles and structure of GDPR, including lawful bases for processing, accountability, data minimization, purpose limitation, and the roles of controllers and processors within an organization.
• Explain how modern digital tools and automated technologies are used in data processing activities, and how these technologies impact the collection, storage, analysis, and sharing of personal data.
• Identify and assess data protection risks arising from automated processing and advanced analytics,
• including issues related to transparency, accuracy, bias, and the potential impact on data subject
• rights.
• Describe how technology can support key compliance functions, such as maintaining records of processing activities (ROPA), conducting Data Protection Impact Assessments (DPIAs), monitoring data flows, and detecting potential breaches.
• Recognize the legal, regulatory, and ethical requirements associated with automated decision-making, including the need for human oversight, explainability, and safeguards to protect individuals’ rights and freedoms.
• Understand practical approaches for integrating technology into a GDPR compliance framework, ensuring alignment with privacy by design and by default, and supporting continuous monitoring, documentation, and improvement of data protection practices.
• Describe how AI can support GDPR compliance activities, such as data mapping, risk assessment, monitoring, and incident detection.
• Recognize the legal and ethical considerations of AI under GDPR, including requirements for explainability, human oversight, and data minimization.
• Understand best practices for implementing AI-driven solutions in a GDPR-compliant manner, aligned with the principles of privacy by design and by default.
  
  ATTITUDE OBJECTIVES:
• Apply GDPR principles in real-world scenarios by analyzing data processing activities and determining appropriate lawful bases, safeguards, and controls.
• Use digital tools to map and document data flows within an organization, ensuring accurate records of processing activities and improved visibility of personal data handling.
• Conduct basic Data Protection Impact Assessments (DPIAs) by identifying risks, evaluating their impact, and recommending appropriate mitigation measures.
• Evaluate automated processes for compliance risks and implement appropriate controls to ensure transparency, accountability, and protection of data subject rights.
• Develop and implement practical compliance measures that integrate technology into daily operations, supporting continuous monitoring, incident detection, and effective response to data protection issues.

∙Data Protection Officers (DPOs) and compliance professionals
∙Legal advisors and in-house counsel
∙Information Security and IT professionals
∙Risk management and internal audit staff
∙Human Resources personnel handling employee data
∙Operations and business process managers
∙Senior managers and decision-makers responsible for governance and compliance
∙Professionals involved in data handling, analysis, or digital transformation initiatives

Participants should meet at least one of the following:
∙Have a role involving the processing or management of personal data, such as in
compliance, legal, IT, HR, or operations functions.
∙Be responsible for ensuring or supporting GDPR compliance within their organization,
including policy implementation, monitoring, or reporting activities.
∙Possess basic knowledge of data protection principles or regulatory requirements, either
through prior training or practical experience.