Corporate Data Protection Officer (IHK)

The certificate course qualifies you as a company data protection officer. You shape data protection according to BDSG and EU GDPR in your company. At the end, you recognize relevant data protection issues and IT security issues and bring about solutions.

The course is divided into five parts. Part one covers the basics, i.e. personal data, rights of protection and the role of the data protection officer. Part two goes into data protection law, from the core tasks to the consequences of data protection violations.

Part three revolves around organization. You learn about the data protection inspection, the data protection concept and cooperation with supervisory authorities. Part four brings technology into play, such as authentication methods, cloud computing and data protection management systems. Part five concludes with practical tips for starting as a data protection officer.

The course takes place completely live online and is not a self-study product. Recordings are not part of the contract according to the provider. The next session runs from September 14, 2026 to September 28, 2026. Classes are held Monday to Friday from 8:30 AM to 12:45 PM. In total, there are 55 teaching hours.

Addressed are professionals from all industries with a basic understanding of data and data processing. You don't need programming skills. But you should have initial experience with spreadsheet software such as MS Excel. Technically, a computer or tablet, a headset and an internet connection with at least 2 Mbps download are sufficient.

At the end, there is a written certificate test online on your own computer. You only need a browser and an internet connection for this. Before and during the test, you identify yourself with a smartphone and ID card. For the IHK certificate, at least 80 percent live attendance and a passed final performance count.

The IHK points out that the IHK certificate is not equivalent to a public-law certificate. A person certification is not associated with it. The seminar can also be booked as exclusive training for a company.

• data and personal data
• protective rights
• the internal data protection officer
• data protection and data security
• supervisory authorities
• EU General Data Protection Regulation and Federal Data Protection Act
• legal situation and core tasks
• legal situation for data subjects
• consequences of data protection violations
• register of processing activities and data protection impact assessment
• the data protection inspection
• creating a data protection concept
• processing inventory
• data protection policies and concepts
• cooperation with supervisory authorities
• interfaces between data protection officer and IT
• IT basic components and internal and external services
• authentication procedures and encryption principles
• cloud computing, new working models, and data protection management systems (DSMS)
• practical tips for starting as a data protection officer