This course will provide you with essential foundational knowledge of current data protection laws and technical and organizational data protection measures, and will explain efficient data protection management systems and how to implement a successful audit program. In addition, you will learn about topics relevant to labor law, such as individual and collective labor law.
-
Certificates: Data protection officer" certificate
-
Additional Certificates: Certificate "Data protection officer with TÜV Rheinland-certified qualification"
Certificate "Data protection auditor with TÜV Rheinland certified qualification"
Certificate "Labor Law" -
Examination: Praxisbezogene Projektarbeiten mit Abschlusspräsentationen
Datenschutzbeauftragte:r mit TÜV Rheinland geprüfter Qualifikation
Datenschutzauditor:in mit TÜV Rheinland geprüfter Qualifikation -
Teaching Times: Full-timeMonday to Friday from 8:30 a.m. to 3:35 p.m. (in weeks with public holidays from 8:30 a.m. to 5:10 p.m.)
-
Language of Instruction: German
-
Duration: 12 Weeks
Data protection officer with TÜV Rheinland-certified qualification
Data protection in the company - basics (approx. 1 day)
History of data protection and objectives
Structure of the European General Data Protection Regulation
The Federal Data Protection Act - subject matter and objectives
GAP analysis between BDSG and GDPR
Material and geographical areas of application
Definitions of terms
Principles (approx. 1 day)
Principles for the processing of personal data
Legitimate interests
Consent
Transparency requirement
Duty to inform
Special categories of personal data
Rights of data subjects (approx. 1 day)
Rights of data subjects
Right to information
Rectification and erasure
Right to object
Right to data portability
Profiling and direct marketing
Right to lodge a complaint
Restrictions
Responsible persons and processors (approx. 2 days)
Risk analysis and TOM
Privacy by design & default
Order processing
Joint controllers
Register of processing activities (VVT)
Security of processing
Entry, access and access controls
Data protection impact assessment (DPIA)
Data protection officer (appointment, position, tasks)
Code of Conduct
Certification: pre-audit, main audit, post-audit
Other bodies with a data protection function (approx. 0.5 days)
The role of the works council (co-determination)
The DPO and the works council
Basics of social data protection
Basics of employee data protection
Personnel file, data access and information rights
Artificial intelligence (AI) and data protection (approx. 0.5 days)
Presentation of specific AI technologies
and possible applications in the professional environment
Risks and opportunities when using AI, especially in connection with pbD
Transfer of personal data (approx. 2 days)
General principles of natural transfers
Data transfers to third countries
Standard contractual clauses
Supervisory authorities
Responsibilities, tasks, powers
Legal remedies, liability and sanctions (approx. 1 day)
Legal remedies
Liability, fines, sanctions
Special processing situations
Final provisions
Federal Data Protection Act (approx. 1 day)
Scope of application, video surveillance of public areas
Exceptions to the rights of data subjects
DPOs of public and non-public bodies
LDAs, fine regulations, sanctions
IT security and data protection (approx. 3 days)
Network components, storage components (RAID)
Basics of access management
IT security basics
IT baseline protection standards
Risk factors
Improvement options
Further areas of responsibility (approx. 3 days)
Development and operation of a data protection management system and SDM
Deletion concept
Backup concept
The legal framework of outsourcing from a data protection perspective
Data protection in the area of marketing and advertising measures
Telecommunications Digital Services Data Protection Act (approx. 1 day)
Structure and contents of the TDDDG
Project work, certification preparation and certification exam "Data Protection Officer with TÜV Rheinland certified qualification" (approx. 3 days)
Data protection auditor with TÜV Rheinland-certified qualification
Basics (approx. 2 days)
Objectives of data protection audits
Basic knowledge of data protection policy (company objectives, principles of action)
EU-DSGVO
Requirements for internal audits and auditors
Data Protection Management System (approx. 3 days)
Requirements for Establishing a Data Protection Management System
Process Models for Establishing and Implementing a Data Protection Management System
Methods, Techniques, and Tools
Current Status Assessment and Analysis, Vulnerability Identification, Risk Analysis
Data protection when using AI systems
Documentation and Risk Analysis Using AI
Standard data protection model (approx. 1 day)
Current status and introduction
SDM implementation and requirements from GDPR
Warranty objectives of the SDM
Generic measures
SDM building blocks
Data protection concept (approx. 2 days)
Relationships to other operational management systems (DIN EN ISO 9000ff., 27001ff.)
Development of an audit program (approx. 2 days)
Development of an audit program
Preparation of audit question lists
Level of detail
Creating audit checklists with AI
Audit Implementation (approx. 4 days)
Interviews as a Source of Information
On-site review of documents
Review of technical equipment
Review of the organizational structure and operational processes
Review of technical and organizational security measures
Site visits
Conducting remote and hybrid audits
Document analysis using AI
Audit Evaluation (approx. 3 days)
Evaluation, audit report, and follow-up actions
Preparation of an audit report
Tracking of actions
Presentation of potential tools (checklists, questionnaires, audit plans, nonconformity reports)
Corrective actions
Creating audit reports with AI
Project work, certification preparation and certification exam "Data protection auditor with TÜV Rheinland certified qualification" (approx. 3 days)
Labor law
Forms of employment (approx. 2 days)
Fixed-term and permanent employment relationships
Part-time models and legal entitlement
Marginal employment
Vocational training
Employment and collective agreement (approx. 2 days)
Recruitment and conclusion of contract
Drafting the employment contract
AGB control of employment contracts
Evidence Act (obligations, deadlines, written form)
Collective bargaining agreement and works agreement
Artificial intelligence (AI) in the work process - legally compliant application (approx. 1 day)
Presentation of specific AI technologies
Possible applications in employment law (relevance for HR processes, documentation/risk issues)
AGG: Job advertisements and application procedures (approx. 2.5 days)
Introduction to the AGG
Diversity management
Data protection compliant handling of applications
Pay transparency (requirements for job advertisements, rights to information, etc.)
Analyzing job advertisements
Conducting job interviews in a legally correct manner
Employee and employer obligations (approx. 3 days)
Obligations of employees and employers
Working hours, wages and salary
Remote work/home office agreements
Right of direction
Company integration management (BEM)
Target agreements
Liability in employment law
Data protection in the employment relationship
Whistleblower Protection Act (HinSchG)
Types and characteristics of employment references
Works constitution law (approx. 2.5 days)
What does the BetrVG regulate?
Tasks and information rights of the works council
Co-determination and participation rights
Election and organization of the works council
Works meeting
Works agreement
Statutory leave and protection rights in the employment relationship (approx. 3 days)
Parental leave
maternity leave
Nursing leave
vacation
Warning and termination (approx. 2 days)
Warnings (function, form, effectiveness)
Reasons for termination
Types of termination and notice periods
Termination/settlement agreement
Protection against dismissal
Project work (approx. 2 days)
To consolidate the content learned
Presentation of the project results
Changes are possible, the course content is updated regularly.
After completing the course, you will be familiar with the essential tasks in data protection. You will have the necessary knowledge based on the current EU GDPR for the legally compliant handling of personal data as well as knowledge of data protection organization and IT security. You will also have specialist knowledge of an efficient data protection management system and be able to successfully plan, carry out and evaluate data protection audits.
You will also have knowledge of the core areas of employment law. These include employment and collective agreements, employee and employer obligations and works constitution law.
The course is aimed at employees from the areas of human resources, administration, quality management or the legal department.
Didactic concept
Your lecturers are highly qualified both professionally and didactically and will teach you from the first to the last day (no self-study system).
You will learn in effective small groups. The courses usually consist of 6 to 25 participants. The general lessons are supplemented by numerous practical exercises in all course modules. The practice phase is an important part of the course, as it is during this time that you process what you have just learned and gain confidence and routine in its application. The final section of the course involves a project, a case study or a final exam.
Virtual classroom alfaview®
Lessons take place using modern alfaview® video technology - either from the comfort of your own home or at our premises at Bildungszentrum. The entire course can see each other face-to-face via alfaview®, communicate with each other in lip-sync voice quality and work on joint projects. Of course, you can also see and talk to your connected trainers live at any time and you will be taught by your lecturers in real time for the entire duration of the course. The lessons are not e-learning, but real live face-to-face lessons via video technology.
The courses at alfatraining are funded by Agentur für Arbeit and are certified in accordance with the AZAV approval regulation. When submitting a Bildungsgutscheinor Aktivierungs- und Vermittlungsgutschein, the entire course costs are usually covered by your funding body.
Funding is also possible via Europäischen Sozialfonds (ESF), Deutsche Rentenversicherung (DRV) or regional funding programs. As a regular soldier, you have the option of attending further training courses via Berufsförderungsdienst (BFD). Companies can also have their employees qualified via funding from Agentur für Arbeit (Qualifizierungschancengesetz).