Training and Certification Programme for Data Protection Officers and Other Data Protection Professionals

Transcription

1 Seminar Training and Certification Programme for Data Protection Officers and Other Data Protection Professionals Basic and Advanced Modules Maastricht (NL), June 2015 European Institute of Public Administration Institut européen d administration publique EIPA, in cooperation with the network of DPOs of the EU institutions, agencies and bodies and with the support of the EDPS

2 Introduction Each participant will have access to the EIPA e-campus through a personal login and password, which will be communicated before the start of the course. The e-campus will be accessible before, during and after the course, thus enabling participants to obtain all necessary information regarding the organisation of the training, to download reading materials, to exchange views in a discussion forum, and to keep in contact with trainers and other participants after the course. Target group This course is designed for anyone whose work relates to the processing of personal data. It is aimed, among others, at data protection officers, national and sub-national officials, compliance officers, information officers, record managers, human resources officers, and any other data protection professionals, particularly those in the public sector and from the EU institutions, agencies and bodies. Description The course will offer an in-depth analysis of the present data protection legal framework, a detailed explanation of the key concepts and principles, actors and roles, before addressing the latest developments and challenges in the field of personal data processing and protection. After the successful first edition of this training and certification seminar, this programme has been fully revised and is now targeted even more to the individual needs of participants. The course aims at presenting practical explanations and tools allowing the participants to develop or further enhance the professional skills necessary to be a topperforming data protection professional. Numerous practical examples, combined with a high level of interactivity, will provide participants with all they need to know about data protection in theory and practice, as well as an insight into how to handle the myriad issues that arise in the workplace on a daily basis in such a challenging and quickly developing working area. Learning methodology The course has been divided into two modules basic and advanced to offer participants the flexibility to adapt the event to their needs. The course is based on presentations, case studies, exercises and guided discussions, and will also involve coaching by DPOs of European institutions and agencies and other Data Protection experts. Objectives The basic module (two days) will offer an explanation of the data protection legislative framework, key concepts and principles of privacy, actors and roles, before addressing the latest developments and challenges in the field of personal data use and protection. It will present participants with a full basic knowledge, allowing them to benefit completely from the advanced module. The advanced module (three days) will have a practiceoriented focus, providing participants with in-depth knowledge of issues related to data protection in theory and practice. There will be parallel workshops allowing participants to learn about the areas of their interest in more detail. The objective is to enable participants to obtain an expert s working knowledge of Data Protection and to qualify them as Data Protection specialists. Certification and examination Participants will receive a certificate of attendance after completing the training course. Those wishing to obtain a certification will have to pass a final test at the end of the advanced module. The examination consists of a multiple-choice test, covering the subject matters dealt with in the plenary sessions in both modules, followed by a written essay where participants have the possibility to choose between the different areas offered in the parallel workshops. Attendance in both modules is in principle required for all participants. However, participants who can demonstrate a proven working experience in the field of Data Protection can be admitted to the advanced module*. * Officially appointed DPOs of the EU institutions, agencies and bodies with more than two years of seniority in post are allowed to proceed straight to the advanced module, taking into account also other elements such as attendance to the EDPS training or any other relevant data protection training by EIPA or other institutions, as well as to the meetings of the network of the DPOs. The certification test at the end of the advance training covers the subjects dealt with during both, the basic and the advanced module.

3 Programme MONDAY 22 JUNE 2015 Basic module: General introduction to data protection Session: Complying with obligations and data subjects rights Introduction to the course Cosimo Monda, Senior Lecturer, Head of Information and Marketing Department, EIPA, Maastricht Introduction to data protection as a fundamental right: the European Convention and OECD guidelines Graham Sutton, Data Protection Expert, nominated by the Council of Europe (CoE), former Policy Adviser at the Home Office, United Kingdom Current EU legal framework Representative of DG Justice, European Commission Coffee break Data protection principles and main concepts Carmen López Ruiz, Data Protection Officer of the EU Council Lunch Actors and roles: controller, processor, and institutional actors in the field of data protection Diana Alonso Blas, Data Protection Officer and Head of Data Protection Service, Eurojust Coffee break Data subject rights Philippe Renaudière, Data Protection Officer of the European Commission Q&A End of the first day TUESDAY 23 JUNE Transfers of personal data: applicable regime and how to ensure adequacy Diana Alonso Blas Coffee break Session: Supervising data protection compliance with obligations and data subjects rights The national legal framework regarding data protection and the role and functions of the national DPAs Paul Breitbarth, Senior International Officer, Dutch Data Protection Authority Q&A Lunch Group exercises (taking place simultaneously) Data protection principles, actors and data subject rights in practice Carmen Lopez Ruiz, Data Protection Officer of the Council of the European Union Paul Breitbarth Dan Manolescu, European Commission, Secretariat- General, Unit of the Data Protection Officer End of the basic module WEDNESDAY 24 JUNE 2015 ADVANCED MODULE: COMPREHENSIVE AND DETAILED ANALYSIS OF THE EU DATA PROTECTION LANDSCAPE AND ITS FUTURE PERSPECTIVE 09:00 Welcome and introduction to the advanced module Marga Pröhl, Director-General, EIPA Opening remarks Guest Speaker: Giovanni Buttarelli, European Data Protection Supervisor (EDPS) (to be confirmed) Coffee break

4 Programme Quick recap of the must know knowledge and key points from the basic module Cosimo Monda and Graham Sutton Key case law on personal data protection and the interaction with other fundamental rights: the jurisprudence of the ECHR and ECJ Christopher Docksey, Director at the EDPS Session: Data protection and technology Data protection and big data, cloud computing, analytics, internet of things: a business lawyer perspective Dr Paolo Balboni, Partner at ICT Legal Consulting & Scientific Director of the European Privacy Association Lunch Session: Data security and interoperability, technical organisational measures, privacy by design and impact assessment Security issues and interoperability: what implications for personal data portability Brian Honan, Director, BH Consulting, Dublin Coffee break Data Protection Officers as assurance providers for data protection and data security compliance Daniel Drewer, Head of Unit, Data Protection Office, Europol Q&A End of third day Dinner THURSDAY 25 JUNE Privacy by design and privacy impact assessment: the essentials John Borking, Borking Consultancy and former Commissioner at the Dutch Data Protection Authority Group exercises (taking place simultaneously) Technical and security issues and privacy by design in practice John Borking, Daniel Drewer, Brian Honan and Paolo Balboni Session: Internal compliance, audit and supervision in practice Data protection audit Daniel Drewer EDPS as supervisory body of EU institutions and bodies Representative EDPS The role of the DPO: applicable professional standards Diana Alonso Blas Lunch Access to documents and data protection in practice Bart Driessen, Member of the Legal Service, General Secretariat of the Council Q&A Parallel workshops (taking place simultaneously from 15:45 to 17:15) 1. Directive 95/46/EC and national legislation in practice DG Justice Representative, Paul Breitbarth, and Graham Sutton 2. The Regulation 45/2001 in practice Sophie Louveaux (tbc), Carmen Lopez Ruiz and Philippe Renaudière End of fourth day FRIDAY 26 JUNE The existing regimes in the ex-third pillar area Diana Alonso Blas Coffee break Legal practice: transfers of personal data, contractual clauses, BCRs, etc. Christopher Kuner, Wilson Sonsini Goodrich & Rosati, Brussels Closing session: Taking data protection into the 21st century: the ongoing EU data protection reform Representative of DG Justice, European Commission Lunch Tests and exams End of the seminar

5 General Information Programme The training and certification programme consists of two modules. Participants can register for either the: Two-day basic module: Introduction to Data Protection, June 2015 Three-day advanced module: Comprehensive and Detailed Analysis of the EU Data Protection Landscape and its Future Perspective, June 2015 Five-day basic and advanced module: June 2015 Course venue The course will take place at the European Institute of Public Administration, O.L. Vrouweplein 22, NL-6211 HE Maastricht, tel.: ; fax: Working language The course will be conducted in English. Fee Fee Special discount for EU DPO s Basic module (2 days) 950* 715 Advanced module (3 days) 1350* 1015 Both modules (5 days) 2000* 1500 The participation fee includes documentation, access to i-learn, certificate, lunches, one dinner and refreshments. Accommodation and travel costs are at the expense of the participants or their administration. EIPA offers its members a reduction of 10% of the registration fee*. This reduction is available to all civil servants working for one of EIPA s member countries (i.e. AT, BE, BG, CY, CZ, DK, FI, FR, DE, GR, HU, IE, IT, LT, LU, MT, NL, PL, PT, ES, SE, UK) and civil servants working for an EU institution, body or agency. Officials of the EU institutions, bodies or agencies should enquire about applicable arrangements. If you are eligible for a discount, please tick the box in the registration form. Please note that reductions cannot be accumulated. For more information, please visit EIPA s website: (FAQ - special discounts). Hotel The European Institute of Public Administration has special price arrangements with a number of hotels selected by us. All hotels are within 10 minutes walking distance from EIPA. Should you wish to make use of this possibility, please book directly via the links below. Payment is to be made directly and personally to the hotel on checking out. Bastion Hotel Townhouse Hotel Hotel Derlon Designhotel Maastricht Hampshire Eden Meals Lunches and dinner will be served at a restaurant in town. Should you require a special menu (e.g. vegetarian, diabetic), please inform the Programme Organiser so that this can be arranged. Registration Kindly complete the registration form and return it before 1 June 2015 to Ms Eveline Hermens, Programme Organiser, European Institute of Public Administration, P.O. Box 1229, NL-6201 BE Maastricht, tel.: ; fax: ; e.hermens@eipa.eu. You can also submit the online registration form which can be found at Your name and address will be part of EIPA s database for our mailing purpose only. If you do not want to be included in our mailing database, please tick the box on the registration form. Confirmation Confirmation of registration will be forwarded to participants on receipt of the completed registration form. Payment Prior payment is a condition for participation. Please indicate the method of payment on the registration form. In any case, the participant or his/her administration will receive an invoice for the payment of the registration fee. For cancellations received after the closing date of registration we will have to charge an administration fee of 150 unless a replacement participant is found. Cancellation policy EIPA reserves the right to cancel the seminar up to two weeks before the starting date. EIPA accepts no responsibility for any costs incurred (travel, hotel, etc.). For EIPA s cancellation policy, please visit our website (FAQ - legal notice). At the time of booking, please mention in the requested field, the EIPA project number for the basic module (2 days), for the advanced module (3 days) and for both basic and advanced module (5 days).

6 Registration Form Training and Certification Programme for Data Protection Officers and Other Data Protection Officials Maastricht (NL), June 2015 Surname:... Title:... M / F First name:... Organisation:... Department:... Current position:... Work address:... Postal code & Town:... Country:... Telephone number:... Fax number:... address:... Invoice information Organisation:... Department:... Address:... Postal code & Town:... Country:... VAT number:... Your reference number:... address:... Registration Fee Discounted fee for EU DPO s Project number Both Modules (5 days) 2000* Basic Module (2 days) 950* Advanced Module (3 days) 1350* Payment The fee includes participation in the seminar, documentation, lunches, refreshments and/or one dinner, access to e-campus, and a certificate. * Discount of 10% (Please check first the conditions at (FAQ - special discounts)) DPO discount Method of payment Bank transfer Credit card American Express card Eurocard/Mastercard Visa card Card number:... Expiry date:... /... Name card holder:... (in case this differs from above) Address card holder:... (in case this differs from above) Postal code:... Country:... (in case this differs from above) Card Validation Code:... (the last three digits on the back of your card) Exempt from VAT by virtue of Article 11, Para. 1 (o), Sub-para. 2 of the Dutch Law on VAT of 1968 Meals Vegetarian Fish allowed Other dietary requirement:... Please return the completed registration form before 1 June 2015 to: Ms Eveline Hermens, European Institute of Public Administration, P.O. Box 1229, NL-6201 BE Maastricht, tel.: , fax: , e.hermens@eipa.eu Your name and address will be part of EIPA s database for our mailing purpose only. Please tick if you do not want to be included in our mailing database.