Data Protection Officer Training (DEKRA)

The Data Protection Officer (DEKRA) training runs over three days as an online seminar. On the first day, you learn the basics of the GDPR: the right to informational self-determination and the processing principles. In addition, the rights of data subjects such as access, rectification, and erasure.

On the second day, it's about the roles of controller and processor, about privacy by design and by default. In addition, the record of processing activities for controllers and processors. You also cover the security of processing with technical and organizational measures as well as the data protection impact assessment.

The third day revolves around the role of the data protection officer themselves: appointment, position, tasks, and protection against dismissal. This is supplemented by international data transfers, liability and sanctions, the supervisory authorities, and data protection within the company. At the end, you specifically review the content for the exam.

The seminar is aimed at aspiring internal and external data protection officers, data protection coordinators, managers, and IT security officers. Auditors, management consultants, lawyers, works councils, and specialists from HR, marketing, or purchasing also benefit from the practical knowledge.

The online seminars of the Gesellschaft für Datenschutz take place live with an instructor, in small learning groups. You receive a welcome package including meals. You do not need any special prior technical knowledge to participate.

Optionally, you can take the online exam „Fachkraft für Datenschutz“ at DEKRA afterwards. It consists of 45 questions in 90 minutes; the GDPR, BDSG, and your training materials are permitted as aids. If you pass the exam, your DEKRA certificate is valid for three years.

I find the concept useful: first the complete practical content in a live online format, then optionally the official proof via the DEKRA exam. This way you can decide for yourself whether attending the seminar is enough or if you need the certificate in addition.

• Introduction to GDPR: right to informational self-determination, objective of the GDPR, terminology
• Principles of the GDPR: legal bases, consent, change of purpose, processing principles
• Rights of data subjects: information obligations, right of access, rectification, erasure
• Controller and processor: responsible entity, privacy by design and default, data processing, joint controllership
• Record of processing activities: documentation obligation, record as controller, record as processor
• Security of processing: technical and organizational measures, confidentiality, integrity, availability, resilience, state of the art, excursus IT security
• Data protection impact assessment: risk assessment
• Data protection officer: appointment, designation, position, tasks, protection against dismissal
• International data transfers: third countries, adequacy decision, appropriate safeguards
• Liability and sanctions: damages, fines
• Supervisory authorities: tasks, powers
• Data protection in the company: data protection management system, data protection organization, video surveillance, marketing
• Review: exam preparation, Q&A
• DEKRA exam "Data Protection Specialist" (optional)