Seminar Training and Certification Programme for Data Protection Officers and Other Data Protection Professionals Basic and Advanced Modules Maastricht (NL), 23-27 June 2014 EIPA, in cooperation with the network of DPOs of the EU institutions, agencies and bodies and with the support of the EDPS European Institute of Public Administration Institut européen d administration publique
Introduction Target group This course is designed for anyone whose work relates to the processing of personal data. It is aimed, among others, at data protection officers, national and sub-national officials, compliance officers, information officers, record managers, human resources officers, and any other data protection professionals, particularly those in the public sector and from the EU institutions, agencies and bodies. Description The course will offer an in-depth analysis of the present data protection legal framework, a detailed explanation of the key concepts and principles, actors and roles, before addressing the latest developments and challenges in the field of personal data processing and protection. After the successful first edition of this training and certification seminar, this programme has been fully revised and is now targeted even more to the individual needs of participants. The course aims at presenting practical explanations and tools allowing the participants to develop or further enhance the professional skills necessary to be a topperforming data protection professional. Numerous practical examples, combined with a high level of interactivity, will provide participants with all they need to know about data protection in theory and practice, as well as an insight into how to handle the myriad issues that arise in the workplace on a daily basis in such a challenging and quickly developing working area. Learning methodology The course has been divided into two modules basic and advanced to offer participants the flexibility to adapt the event to their needs. The course is based on presentations, case studies, exercises and guided discussions, and will also involve coaching by DPOs of European institutions and agencies and other Data Protection experts. Each participant will have access to the EIPA e-campus through a personal login and password, which will be communicated before the start of the course. The e-campus will be accessible before, during and after the course, thus enabling participants to obtain all necessary information regarding the organisation of the training, to download reading materials, to exchange views in a discussion forum, and to keep in contact with trainers and other participants after the course. Objectives The basic module (two days) will offer an explanation of the data protection legislative framework, key concepts and principles of privacy, actors and roles, before addressing the latest developments and challenges in the field of personal data use and protection. It will present participants with a full basic knowledge, allowing them to benefit completely from the advanced module. The advanced module (three days) will have a practiceoriented focus, providing participants with in-depth knowledge of issues related to data protection in theory and practice. There will be parallel workshops allowing participants to learn about the areas of their interest in more detail. The objective is to enable participants to obtain an expert s working knowledge of Data Protection and to qualify them as Data Protection specialists. Certification and examination Participants will receive a certificate of attendance after completing the training course. Those wishing to obtain a certification will have to pass a final test at the end of the advanced module. The examination consists of a multiple-choice test, covering the subject matters dealt with in the plenary sessions in both modules, followed by a written essay where participants have the possibility to choose between the different areas offered in the parallel workshops. Attendance in both modules is in principle required for all participants. However, participants who can demonstrate a proven working experience in the field of Data Protection can be admitted to the advanced module*. * Officially appointed DPOs of the EU institutions, agencies and bodies with more than a year of seniority in post are allowed to proceed straight to the advanced module. They are however advised to use the online assessment as a tool for self-assessment after registering, and to take into account other elements such as attendance to the EDPS training or any other relevant data protection training by EIPA or other institutions, as well as to the meetings of the network of the DPOs. The certification test at the end of the advance training covers the subjects dealt with during both, the basic and the advanced module.
Programme Tuesday 24 June 2014 09.00 Transfers of personal data to third countries: Applicable regime Diana Alonso Blas 10.00 Coffee break 10.30 Legal practice : contractual clauses, BCRs Cedric Burton, Of Counsel, Privacy & Data Security, Consumer Regulatory & Privacy, Wilson Sonsini Goodrich & Rosati Monday 23 June 2014 11.45 Recent case law on Personal Data Protection and the interaction with other fundamental rights: the jurisprudence of the ECHR and ECJ Christopher Docksey, Director at the EDPS Basic module: Introduction to Data Protection 13.00 Lunch 10.00 Introduction to the course Cosimo Monda, Senior Lecturer, Head of Information and Marketing Department, EIPA, Maastricht 14.15 Privacy by design How to develop a privacy by design policy; How to build DP principles to be applied in the design of communication and information systems. John Borking, Borking Consultancy and former Commissioner at the Dutch Data Protection Authority 10.30 Introduction to Data Protection as a fundamental right: importance and short history Graham Sutton, Data Protection Expert Council of Europe (CoE), former Policy Adviser at the Home Office, United Kingdom 11.15 Coffee break 11.45 Data protection principles and fundamental rights Philippe Renaudière, Data Protection Officer of the EC 13.00 Lunch 14.30 Main concepts, actors and roles: controller and processor as well as main actors in the field of Data Protection (Article 29 WP, EDPS, JSBs, the EP, etc.) Diana Alonso Blas, Data Protection Officer and Head of Data Protection Service, Eurojust 15.45 Coffee break 16.00 Exercise: the main data protection principles and actors Carmen Lopez Ruiz, Data Protection Officer of the Council of the European Union 17.15 End of first day 15.15 Coffee break 15.30 Access to documents and data protection Bart Driessen, Member of the Legal Service, General Secretariat of the Council of the EU 16.30 The national legal framework regarding data protection and the role and functions of the DPAs and other supervisory bodies Paul Breitbarth, Senior International Officer, Dutch Data Protection Authority 17.30 End of second day
Programme Wednesday 25 June 2014 Advanced module: Comprehensive and detailed analysis of the EU Data Protection landscape and its future perspective 09.30 Current legal landscape in the field of data protection A. The Directive 95/46/EC Philippe Renaudière B. The Regulation 45/2001 Sophie Louveaux, Head of Sector for Supervision and Enforcement, European Data Protection Supervisor (EDPS) C. Data Protection framework in the area of freedom, security and justice Diana Alonso Blas and Daniel Drewer, Data Protection Officer and Head of the Data Protection Unit, Europol 11.30 Coffee break 12.00 Data Subject Rights Ute Kallenberger, Legal officer and Head of inspections, European Data Protection Supervisor (EDPS) 13.00 Lunch Afternoon: Parallel workshops taking place simultaneously (from 14:30 to 16:30) 1. Directive 95/46/EC and national legislation Philippe Renaudière and Paul Breitbarth 2. The Regulation 45/2001 Sophie Louveaux and Carmen Lopez Ruiz 3. The existing regimes in the ex-third pillar area and international transfers Diana Alonso Blas and Daniel Drewer THURSDAY 26 JUNE 2014 09.00 Data protection and technical-organisational measures Data security; Relevant notions such as audit trails and log files, backups, automatic deletion, role of the system administrations, SLAs with internal IT department, contracts with external processors, cloud computing, etc.; Which possibilities exist for data anonymisation? Daniel Drewer 10.00 Coffee break 10.15 Workshop: Technical and security issues and privacy by design Daniel Drewer and Jeroen Van Rest, Netherlands Organisation for Applied Scientific Research (TNO) 12.30 Lunch 14.30 Workshop: Internal compliance, inspections and audit Diana Alonso Blas and Florence de Villenfagne 16.30 End of fourth day FRIDAY 27 JUNE 2013 09.00 e-privacy Emmanuel Cabau, Policy Officer Digital Privacy, DG Communications Networks, Content and Technology, European Commission (EC) 10.15 Coffee break 10.30 Surveillance and data protection: the ongoing NSA discussion Paul Breitbarth 11.15 The ongoing reform Guy Stessens, Secretariat of the Council of the European Union 12.30 The role of the DPOs now and in the future: applicable standards Diana Alonso Blas 12.45 Closing remarks: Taking Data Protection into the 21st Century (video message) Commissioner Viviane Reding, Vice-President of the EC, Justice, Fundamental Rights and Citizenship 13.00 Lunch 14.15 Tests and exams 16.15 End of the seminar
General Information Programme The training and certification programme consists of two modules. Participants can register for either the: Two-day basic module: Introduction to Data Protection, 23-24 June 2014 Three-day advanced module: Comprehensive and Detailed Analysis of the EU Data Protection Landscape and its Future Perspective, 25-27 June 2014 Five-day basic and advanced module: 23-27 June 2014 Course venue The course will take place at the European Institute of Public Administration, O.L. Vrouweplein 22, NL-6211 HE Maastricht, tel.: +31 43 32 96 222; fax: +31 43 32 96 296. Working language The course will be conducted in English. Fee Fee Special discount for EU DPO s Basic module (2 days) 950* 715 Advanced module (3 days) 1250* 935 Both modules (5 days) 1800* 1350 The participation fee includes documentation, access to i-learn, certificate, lunches, one dinner and refreshments. Accommodation and travel costs are at the expense of the participants or their administration. EIPA offers its members a reduction of 10% of the registration fee*. This reduction is available to all civil servants working for one of EIPA s member countries (i.e. AT, BE, BG, CY, CZ, DK, EE, FI, FR, DE, GR, HU, IE, IT, LT, LU, MT, NL, PL, PT, ES, SE, UK) and civil servants working for an EU institution, body or agency. Officials of the EU institutions, bodies or agencies should enquire about applicable arrangements. If you are eligible for a discount, please tick the box in the registration form. Please note that reductions cannot be accumulated. For more information, please visit EIPA s website: http://seminars.eipa.eu (FAQ - special discounts). Hotel The European Institute of Public Administration has special price arrangements with a number of hotels selected by us. All hotels are within 10 minutes walking distance from EIPA. Should you wish to make use of this possibility, please book directly via the links below. Payment is to be made directly and personally to the hotel on checking out. Bastion Hotel www.bastionhotels.nl/en/eipa.html Townhouse Hotel www.townhousehotels.nl/eipa Hotel Derlon www.derlon.com/business/eipa-goes-derlon Designhotel Maastricht Hampshire Eden www.hampshire-hotels.com/eipa Meals Lunches and dinner will be served at a restaurant in town. Should you require a special menu (e.g. vegetarian, diabetic), please inform the Programme Organiser so that this can be arranged. Registration Kindly complete the registration form and return it before 1 June 2014 to Ms Eveline Hermens, Programme Organiser, European Institute of Public Administration, P.O. Box 1229, NL-6201 BE Maastricht, tel.: +31 43 32 96 259; fax: +31 43 32 96 296; e-mail: e.hermens@eipa.eu. You can also submit the online registration form which can be found at http://seminars.eipa.eu. Your name and address will be part of EIPA s database for our mailing purpose only. If you do not want to be included in our mailing database, please tick the box on the registration form. Confirmation Confirmation of registration will be forwarded to participants on receipt of the completed registration form. Payment Prior payment is a condition for participation. Please indicate the method of payment on the registration form. In any case, the participant or his/her administration will receive an invoice for the payment of the registration fee. For cancellations received after the closing date of registration we will have to charge an administration fee of 150 unless a replacement participant is found. Cancellation policy EIPA reserves the right to cancel the seminar up to two weeks before the starting date. EIPA accepts no responsibility for any costs incurred (travel, hotel, etc.). For EIPA s cancellation policy, please visit our website http://seminars.eipa.eu (FAQ - legal notice). At the time of booking, please mention in the requested field, the EIPA project number 14115021 for the basic module (2 days), 14115022 for the advanced module (3 days) and 1411502 for both basic and advanced module (5 days).
Registration Form Training and Certification Programme for Data Protection Officers and Other Data Protection Officials Maastricht (NL), 23-27 June 2014 Surname:... Title:... M / F First name:... Organisation:... Department:... Current position:... Work address:... Postal code & Town:... Country:... Telephone number:... Fax number:... E-mail address:... Invoice information Organisation:... Department:... Address:... Postal code & Town:... Country:... VAT number:... Your reference number:... E-mail address:... Registration Fee Discounted fee for EU DPO s Project number Both Modules (5 days) 1800* 1350 1411502 Basic Module (2 days) 950* 715 14115021 Advanced Module (3 days) 1250* 935 14115022 Payment The fee includes participation in the seminar, documentation, lunches, refreshments and/or one dinner, access to e-campus, and a certificate. * Discount of 10% (Please check first the conditions at http://seminars.eipa.eu (FAQ - special discounts)) DPO discount Method of payment Bank transfer Credit card American Express card Eurocard/Mastercard Visa card Card number:... Expiry date:... /... Name card holder:... (in case this differs from above) Address card holder:... (in case this differs from above) Postal code:... Country:... (in case this differs from above) Card Validation Code:... (the last three digits on the back of your card) Exempt from VAT by virtue of Article 11, Para. 1 (o), Sub-para. 2 of the Dutch Law on VAT of 1968 Meals Vegetarian Fish allowed Other dietary requirement:... Please return the completed registration form before 1 June 2014 to: Ms Eveline Hermens, European Institute of Public Administration, P.O. Box 1229, NL-6201 BE Maastricht, tel.: +31 43 32 96 259, fax: +31 43 32 96 296, e-mail: e.hermens@eipa.eu Your name and address will be part of EIPA s database for our mailing purpose only. Please tick if you do not want to be included in our mailing database.