DATA PROTECTION DELEGATE COURSE 

Data Protection Officer (DPO) and SC-200 Microsoft Security Analysis Associate

What does certification as a DPO entail? The Spanish Data Protection Agency (AEPD) has established a certification scheme for DPOs, allowing data controllers to select professionals whose skills have been certified by entities accredited by ENAC. 

The DPO certification scheme ensures that these professionals have the necessary qualifications and knowledge to perform their duties. Certifications are awarded by certifying entities accredited by ENAC. 

Although certification is not mandatory to work as a DPO, the AEPD has considered it important to provide a reference standard to the market, ensuring the qualification and professional capacity of DPO candidates. 

Certification process as a DPO To start the evaluation process, you must meet one of the following prerequisites: 

1. Have at least 5 years of professional experience in projects or activities related to the functions of the DPO, without the need to justify training hours. 

1. Have at least 3 years of professional experience in projects or activities related to the functions of the DPO, in addition to having completed recognized training of at least 60 hours in the subjects included in the Certification Scheme program. 

1. Possess at least 2 years of professional experience in projects or activities related to the functions of the DPO, together with recognized training of at least 100 hours in the subjects included in the Certification Scheme program. 

1. In the absence of previous professional experience, have recognised training of at least 180 hours in the subjects included in the Certification Scheme programme. 

All training, whether in-person or online, will be considered as long as the established requirements are met. 

Both prior and subsequent experience prior to the publication of the GDPR (General Data Protection Regulation) will be taken into account, both at national and European Union level. 

Application and development of the process Those interested in obtaining certification as DPD must submit the following documentation to the accredited Certification Entities: 

• Application form. 
• Detailed resume. 
• Documentation justifying compliance with the prerequisites. 
• Proof of payment of the corresponding fee. 

Once the application has been received, the Certification Authority will verify the documentation. If any document is missing, the candidate will be informed for correction within 10 working days. 

Applicants must present documentation verifying their identity to access the exam. 

DPO Certification Exam The candidate must demonstrate his/her competence through an exam that will assess theoretical knowledge, professional capacity and personal skills required for the role of DPO. The characteristics of the exam are as follows: 

• It consists of 150 multiple choice questions, 20% of which describe practical scenarios. 
• A minimum of 75% correct answers is required to pass. 
• The questions have four answer options, with only one being valid. 
• Incorrect or blank answers are not penalized. 
• The duration of the exam is four hours. 

Certification as a DPO is valid for three years, unless a sanction of suspension or withdrawal of certification is applied. 

Data Protection Officer Certification Entities Only entities accredited by ENAC in accordance with the UNE-EN ISO/IEC 17024:2012 standard and the Data Protection Officer Certification Scheme can certify DPOs. You can consult these entities on the AEPD website. 

Introduction: 

The introduction of the General Data Protection Regulation has given rise to the emergence of the Data Protection Officer, who is recognised as the person responsible for managing data protection. Our 60-hour DPO Course prepares you to practice this profession and qualifies you to take the certification exam. 

Goals: 

This course aims to help participants: 

• Understand general regulations, such as the GDPR and the LOPDGDD, including their application and the European Regulation. 
• Familiarize yourself with the concept of active responsibility and ensure compliance. 
• Master the techniques and procedures necessary to ensure compliance with data protection regulations. 

Addressed to: 

The 60-hour DPO Course is designed for professionals in the fields of Information Security, Technology or Law, as well as for any professional with at least 3 years of experience in tasks related to data protection who seeks to obtain official certification as a Data Protection Officer (DPO). 

Content: 

Topic 1: Regulatory Context of Data Protection 

1. Study of the general regulations on data protection.  

1. Privacy and data protection at international level.  

1. Evolution of data protection in Europe, including background and proposals for reform.  

1. Legal framework for data protection in Spain and standards and good practices.  

Topic 2: European General Data Protection Regulation (GDPR) and Organic Law 3/2018, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD): Fundamentals 

1. Analysis of Regulation EU 2016/679 and its scope.  

1. Key definitions and obligated subjects.  

1. Practical exercise on the scope of the GDPR.  

Topic 3: Data Protection Principles 

1. Study of the right/duty binomial in data protection.  

1. Aspects of legality, loyalty, transparency and limitation in data processing.  

1. Minimization, accuracy and retention of personal data.  

Topic 4: Legitimacy for the Processing of Personal Data in the GDPR and the LOPDGDD 

1. Analysis of the interested party's consent and its granting and revocation.  

1. Informed consent and special categories of data.  

1. Legal bases other than consent.  

Topic 5: Citizens' Rights in the Protection of their Personal Data 

1. Study of the rights of individuals over their personal data, including access, rectification, deletion, opposition, among others.  

1. Solved exercise on the exercise of rights by citizens.  

Topic 6: Protection of Personal Data: Compliance Measures in the GDPR and the LOPDGDD 

1. Implementation of data protection policies.  

1. Relations between the parties involved and formalization of contracts.  

1. Record of processing activities and their identification and classification.  

Topic 7: Proactive Responsibility 

1. Principle of proactive responsibility and privacy by design.  

1. Data protection and personal data security impact assessment.  

1. Role of the Data Protection Officer (DPO) and codes of conduct and certifications.  

Topic 8: The Data Protection Officer (DPD) in the GDPR and the LOPDGDD 

1. Appointment and functions of the DPO, including analysis of conflicts of interest.  

1. Procedures, collaboration and communication with the data protection authority.  

1. Professional competence and training of the DPO.  

Topic 9: International Data Transfers in the GDPR and LOPDGDD 

1. Analysis of international data movement and appropriate safeguards.  

1. Authorization of the supervisory authority and contractual clauses.  

Topic 10: Control Authorities in the GDPR and the LOPDGDD 

1. Study of supervisory authorities and their cooperation and coherence.  

1. Powers and sanctioning regime.  

1. Procedures followed by the AEPD and jurisdictional protection.  

Topic 11: GDPR Interpretation Guidelines 

Analysis of opinions and criteria for interpreting the GDPR. 

Topic 12: Sectoral Regulations Affected by Data Protection 

Study of sectoral regulations on data protection in different areas such as healthcare, pharmaceuticals, research, among others. 

Topic 13: Spanish Regulations with Implications for Data Protection 

Approach to state regulations with implications for data protection, including the LSSI, LGT, Firma-e Law, among others. 

Topic 14: European Regulations with Implications for Data Protection 

Study of EU regulations related to data protection, including the e-Privacy Directive and other relevant regulations. 

Topic 15: 

1. Exploration and Control of Risks in the Management of Personal Data 

1. Approaches to Analyze and Manage Risks Methodically 

1. Development of Compliance Programs in Data Protection and Organizational Security 

1. Safeguarding Sensitive Information 

1. Data Protection Impact Assessment (DPIA) 

Topic 16: 

1. Data Protection Audit 

1. Information Systems Audit 

1. Security Management in Data Processing Processes 

1. Other relevant aspects 

Unit 17: Practical application of Cybersecurity management with Microsoft technologies course SC-200