How To Prepare For A Data Protection Course

Transcription

1 Seminar Training and Certification Programme for Data Protection Officers and Other Data Protection Professionals Basic and Advanced Modules Maastricht (NL), June 2014 EIPA, in cooperation with the network of DPOs of the EU institutions, agencies and bodies and with the support of the EDPS European Institute of Public Administration Institut européen d administration publique

2 Introduction Target group This course is designed for anyone whose work relates to the processing of personal data. It is aimed, among others, at data protection officers, national and sub-national officials, compliance officers, information officers, record managers, human resources officers, and any other data protection professionals, particularly those in the public sector and from the EU institutions, agencies and bodies. Description The course will offer an in-depth analysis of the present data protection legal framework, a detailed explanation of the key concepts and principles, actors and roles, before addressing the latest developments and challenges in the field of personal data processing and protection. After the successful first edition of this training and certification seminar, this programme has been fully revised and is now targeted even more to the individual needs of participants. The course aims at presenting practical explanations and tools allowing the participants to develop or further enhance the professional skills necessary to be a topperforming data protection professional. Numerous practical examples, combined with a high level of interactivity, will provide participants with all they need to know about data protection in theory and practice, as well as an insight into how to handle the myriad issues that arise in the workplace on a daily basis in such a challenging and quickly developing working area. Learning methodology The course has been divided into two modules basic and advanced to offer participants the flexibility to adapt the event to their needs. The course is based on presentations, case studies, exercises and guided discussions, and will also involve coaching by DPOs of European institutions and agencies and other Data Protection experts. Each participant will have access to the EIPA e-campus through a personal login and password, which will be communicated before the start of the course. The e-campus will be accessible before, during and after the course, thus enabling participants to obtain all necessary information regarding the organisation of the training, to download reading materials, to exchange views in a discussion forum, and to keep in contact with trainers and other participants after the course. Objectives The basic module (two days) will offer an explanation of the data protection legislative framework, key concepts and principles of privacy, actors and roles, before addressing the latest developments and challenges in the field of personal data use and protection. It will present participants with a full basic knowledge, allowing them to benefit completely from the advanced module. The advanced module (three days) will have a practiceoriented focus, providing participants with in-depth knowledge of issues related to data protection in theory and practice. There will be parallel workshops allowing participants to learn about the areas of their interest in more detail. The objective is to enable participants to obtain an expert s working knowledge of Data Protection and to qualify them as Data Protection specialists. Certification and examination Participants will receive a certificate of attendance after completing the training course. Those wishing to obtain a certification will have to pass a final test at the end of the advanced module. The examination consists of a multiple-choice test, covering the subject matters dealt with in the plenary sessions in both modules, followed by a written essay where participants have the possibility to choose between the different areas offered in the parallel workshops. Attendance in both modules is in principle required for all participants. However, participants who can demonstrate a proven working experience in the field of Data Protection can be admitted to the advanced module*. * Officially appointed DPOs of the EU institutions, agencies and bodies with more than a year of seniority in post are allowed to proceed straight to the advanced module. They are however advised to use the online assessment as a tool for self-assessment after registering, and to take into account other elements such as attendance to the EDPS training or any other relevant data protection training by EIPA or other institutions, as well as to the meetings of the network of the DPOs. The certification test at the end of the advance training covers the subjects dealt with during both, the basic and the advanced module.

3 Programme Tuesday 24 June Transfers of personal data to third countries: Applicable regime Diana Alonso Blas Coffee break Legal practice : contractual clauses, BCRs Cedric Burton, Of Counsel, Privacy & Data Security, Consumer Regulatory & Privacy, Wilson Sonsini Goodrich & Rosati Monday 23 June Recent case law on Personal Data Protection and the interaction with other fundamental rights: the jurisprudence of the ECHR and ECJ Christopher Docksey, Director at the EDPS Basic module: Introduction to Data Protection Lunch Introduction to the course Cosimo Monda, Senior Lecturer, Head of Information and Marketing Department, EIPA, Maastricht Privacy by design How to develop a privacy by design policy; How to build DP principles to be applied in the design of communication and information systems. John Borking, Borking Consultancy and former Commissioner at the Dutch Data Protection Authority Introduction to Data Protection as a fundamental right: importance and short history Graham Sutton, Data Protection Expert Council of Europe (CoE), former Policy Adviser at the Home Office, United Kingdom Coffee break Data protection principles and fundamental rights Philippe Renaudière, Data Protection Officer of the EC Lunch Main concepts, actors and roles: controller and processor as well as main actors in the field of Data Protection (Article 29 WP, EDPS, JSBs, the EP, etc.) Diana Alonso Blas, Data Protection Officer and Head of Data Protection Service, Eurojust Coffee break Exercise: the main data protection principles and actors Carmen Lopez Ruiz, Data Protection Officer of the Council of the European Union End of first day Coffee break Access to documents and data protection Bart Driessen, Member of the Legal Service, General Secretariat of the Council of the EU The national legal framework regarding data protection and the role and functions of the DPAs and other supervisory bodies Paul Breitbarth, Senior International Officer, Dutch Data Protection Authority End of second day

4 Programme Wednesday 25 June 2014 Advanced module: Comprehensive and detailed analysis of the EU Data Protection landscape and its future perspective Current legal landscape in the field of data protection A. The Directive 95/46/EC Philippe Renaudière B. The Regulation 45/2001 Sophie Louveaux, Head of Sector for Supervision and Enforcement, European Data Protection Supervisor (EDPS) C. Data Protection framework in the area of freedom, security and justice Diana Alonso Blas and Daniel Drewer, Data Protection Officer and Head of the Data Protection Unit, Europol Coffee break Data Subject Rights Ute Kallenberger, Legal officer and Head of inspections, European Data Protection Supervisor (EDPS) Lunch Afternoon: Parallel workshops taking place simultaneously (from 14:30 to 16:30) 1. Directive 95/46/EC and national legislation Philippe Renaudière and Paul Breitbarth 2. The Regulation 45/2001 Sophie Louveaux and Carmen Lopez Ruiz 3. The existing regimes in the ex-third pillar area and international transfers Diana Alonso Blas and Daniel Drewer THURSDAY 26 JUNE Data protection and technical-organisational measures Data security; Relevant notions such as audit trails and log files, backups, automatic deletion, role of the system administrations, SLAs with internal IT department, contracts with external processors, cloud computing, etc.; Which possibilities exist for data anonymisation? Daniel Drewer Coffee break Workshop: Technical and security issues and privacy by design Daniel Drewer and Jeroen Van Rest, Netherlands Organisation for Applied Scientific Research (TNO) Lunch Workshop: Internal compliance, inspections and audit Diana Alonso Blas and Florence de Villenfagne End of fourth day FRIDAY 27 JUNE e-privacy Emmanuel Cabau, Policy Officer Digital Privacy, DG Communications Networks, Content and Technology, European Commission (EC) Coffee break Surveillance and data protection: the ongoing NSA discussion Paul Breitbarth The ongoing reform Guy Stessens, Secretariat of the Council of the European Union The role of the DPOs now and in the future: applicable standards Diana Alonso Blas Closing remarks: Taking Data Protection into the 21st Century (video message) Commissioner Viviane Reding, Vice-President of the EC, Justice, Fundamental Rights and Citizenship Lunch Tests and exams End of the seminar

5 General Information Programme The training and certification programme consists of two modules. Participants can register for either the: Two-day basic module: Introduction to Data Protection, June 2014 Three-day advanced module: Comprehensive and Detailed Analysis of the EU Data Protection Landscape and its Future Perspective, June 2014 Five-day basic and advanced module: June 2014 Course venue The course will take place at the European Institute of Public Administration, O.L. Vrouweplein 22, NL-6211 HE Maastricht, tel.: ; fax: Working language The course will be conducted in English. Fee Fee Special discount for EU DPO s Basic module (2 days) 950* 715 Advanced module (3 days) 1250* 935 Both modules (5 days) 1800* 1350 The participation fee includes documentation, access to i-learn, certificate, lunches, one dinner and refreshments. Accommodation and travel costs are at the expense of the participants or their administration. EIPA offers its members a reduction of 10% of the registration fee*. This reduction is available to all civil servants working for one of EIPA s member countries (i.e. AT, BE, BG, CY, CZ, DK, EE, FI, FR, DE, GR, HU, IE, IT, LT, LU, MT, NL, PL, PT, ES, SE, UK) and civil servants working for an EU institution, body or agency. Officials of the EU institutions, bodies or agencies should enquire about applicable arrangements. If you are eligible for a discount, please tick the box in the registration form. Please note that reductions cannot be accumulated. For more information, please visit EIPA s website: (FAQ - special discounts). Hotel The European Institute of Public Administration has special price arrangements with a number of hotels selected by us. All hotels are within 10 minutes walking distance from EIPA. Should you wish to make use of this possibility, please book directly via the links below. Payment is to be made directly and personally to the hotel on checking out. Bastion Hotel Townhouse Hotel Hotel Derlon Designhotel Maastricht Hampshire Eden Meals Lunches and dinner will be served at a restaurant in town. Should you require a special menu (e.g. vegetarian, diabetic), please inform the Programme Organiser so that this can be arranged. Registration Kindly complete the registration form and return it before 1 June 2014 to Ms Eveline Hermens, Programme Organiser, European Institute of Public Administration, P.O. Box 1229, NL-6201 BE Maastricht, tel.: ; fax: ; e.hermens@eipa.eu. You can also submit the online registration form which can be found at Your name and address will be part of EIPA s database for our mailing purpose only. If you do not want to be included in our mailing database, please tick the box on the registration form. Confirmation Confirmation of registration will be forwarded to participants on receipt of the completed registration form. Payment Prior payment is a condition for participation. Please indicate the method of payment on the registration form. In any case, the participant or his/her administration will receive an invoice for the payment of the registration fee. For cancellations received after the closing date of registration we will have to charge an administration fee of 150 unless a replacement participant is found. Cancellation policy EIPA reserves the right to cancel the seminar up to two weeks before the starting date. EIPA accepts no responsibility for any costs incurred (travel, hotel, etc.). For EIPA s cancellation policy, please visit our website (FAQ - legal notice). At the time of booking, please mention in the requested field, the EIPA project number for the basic module (2 days), for the advanced module (3 days) and for both basic and advanced module (5 days).

6 Registration Form Training and Certification Programme for Data Protection Officers and Other Data Protection Officials Maastricht (NL), June 2014 Surname:... Title:... M / F First name:... Organisation:... Department:... Current position:... Work address:... Postal code & Town:... Country:... Telephone number:... Fax number:... address:... Invoice information Organisation:... Department:... Address:... Postal code & Town:... Country:... VAT number:... Your reference number:... address:... Registration Fee Discounted fee for EU DPO s Project number Both Modules (5 days) 1800* Basic Module (2 days) 950* Advanced Module (3 days) 1250* Payment The fee includes participation in the seminar, documentation, lunches, refreshments and/or one dinner, access to e-campus, and a certificate. * Discount of 10% (Please check first the conditions at (FAQ - special discounts)) DPO discount Method of payment Bank transfer Credit card American Express card Eurocard/Mastercard Visa card Card number:... Expiry date:... /... Name card holder:... (in case this differs from above) Address card holder:... (in case this differs from above) Postal code:... Country:... (in case this differs from above) Card Validation Code:... (the last three digits on the back of your card) Exempt from VAT by virtue of Article 11, Para. 1 (o), Sub-para. 2 of the Dutch Law on VAT of 1968 Meals Vegetarian Fish allowed Other dietary requirement:... Please return the completed registration form before 1 June 2014 to: Ms Eveline Hermens, European Institute of Public Administration, P.O. Box 1229, NL-6201 BE Maastricht, tel.: , fax: , e.hermens@eipa.eu Your name and address will be part of EIPA s database for our mailing purpose only. Please tick if you do not want to be included in our mailing database.