-
US
IN
US
UK
-
+1 5087443677



This course is recognized by the National Skill Development Corporation, a PPP under the Ministry of Skill Development and Entrepreneurship of the Government of India. You will receive a certificate cobranded by NSDC and Skill India on successful completion.
Introduction
Post-pandemic, the importance of data protection and privacy has escalated due to increased remote work, internet usage, and cyber threats, leading to global spikes in data breaches.
Key Developments
- Cybercrime Surge: 2020 marked a "cyber pandemic" with cyber attacks, including a fivefold increase against the WHO. Annual cybercrime costs may reach $10.5 trillion by 2025.
- Company Vulnerabilities: Notable data leaks have affected large and small companies, including Microsoft and Twitter, exacerbated by the shift to remote work.
- Legislative Responses: Globally, strengthened data privacy laws now require better data safeguards, fueling a surge in data protection careers.
- Compliance Requirements: Entities handling EU residents' data must comply with GDPR, prompting updates in data protection laws worldwide.
Market Trends
- Consumer Awareness: Growing awareness of data protection has led to significant business risks and customer losses for non-compliant companies.
- Regulatory Penalties: Increasing fines for data breaches highlight the rising costs and reputation risks, such as a notable €10.4 million penalty in Germany.
- Professional Opportunities: Demand for in-house privacy teams and consultants is rising, with critical roles like Data Protection Officer becoming essential.
- Remote Work Potential: Tasks like GDPR compliance are increasingly remote, supported by platforms like Upwork.
- Career Paths: Significant opportunities exist for professionals with skills in law, accounting, and IT to specialize in data protection and privacy.
How can a young lawyer, accountant or company secretary build a career in this area?
- Core Principles: Master key concepts such as privacy-by-design to effectively draft and implement privacy notices and policies.
- Skill Development: Learn to draft technical and data processing clauses, and perform audits and impact assessments.
- Practical Training: Pursue hands-on training to handle real-world data protection tasks, beyond what's covered in typical certification courses.
- Build a Portfolio: Create a portfolio of work samples and publish articles on data protection across various jurisdictions to showcase expertise.
- Networking: Engage with the privacy community through events and online forums to find mentors and job opportunities.
- Remote Opportunities: Explore remote and freelance roles, such as Data Protection Officer, which may not require specific local qualifications.
- Job Preparation: Stay updated on the latest data protection issues to enhance your proposals and perform well in interviews.
- Utilize Existing Skills: Apply your legal, accounting, or secretarial knowledge to understand and navigate compliance issues.
- Certifications and Beyond: Supplement foundational certifications like CIPP with practical experience to increase your marketability.
Who should take this course?
- HR Professionals: Ideal for those aiming to manage employee data in compliance with data protection laws.
- Commerce Students: Beneficial for those in operations, sales, marketing, and related fields.
- IT Professionals: Suitable for those looking to enhance their organization's data protection and privacy strategies.
- Young Lawyers: Perfect for those transitioning to technology law and seeking roles in startups, law firms, or corporate privacy teams.
- In-House Counsels: Designed for counsels aiming to handle global data protection and privacy issues within their organizations.
- Chartered Accountants and Company Secretaries: Great for professionals offering specialized, high-value technology-related services.
- Law Students: Ideal for those interested in a career in technology law, whether in law firms or corporate teams.
What will you learn from this course?
- Data Types and Privacy: Understand the distinctions between personal, sensitive, and other data types, and the significance of data protection.
- Sector Insights and Employer Potential: Learn which sectors handle large amounts of data, presenting potential employment opportunities.
- Cross-Border Data Concerns: Explore concerns related to data collection and cross-border transfers, including drafting data protection agreements.
- Compliance and Governance: Gain insights into creating compliance programs, developing internal policies, and collaborating with regulators.
- Disputes and Risk Management: Discover strategies for handling disputes and conducting risk assessments in data protection.
- Global Data Protection Laws: Study data protection laws across key regions including the EU, US, Canada, Asia, and the UAE.
Who will be your potential employers or clients?
- Large Multinationals: Companies with dedicated privacy and data protection departments seeking employees knowledgeable in multi-jurisdictional laws.
- Startups: Expanding globally, needing compliance with international data protection regulations but unable to afford large compliance teams.
- Tech Law Firms: Small to medium-sized firms worldwide looking to outsource paralegal work remotely to build capacity cost-effectively.
- Small Businesses: Seeking guidance on complying with data protection laws for their websites and agreements.
- Consumer Associations: Engaging in class action lawsuits against major companies for data breaches, like the significant case against British Airways in the UK.
What is unique about this course?
- Comprehensive Legislation Coverage: Delivers in-depth introductions to data protection laws from key global regions, including legislative updates.
- Demanding and Detailed: Requires completion of multiple assignments, with an intensive 5-6 hour weekly commitment outside of class.
- Expert-Led Interactive Classes: Features discussions and extensive support for doubt resolution both in and out of class.
- Personalized Coaching: Offers individual attention and assistance throughout the course from dedicated trainers and course anchors.
- Constructive Feedback: Provides detailed feedback on assignments and additional support through forums and a real-time WhatsApp group.
- Publishing Opportunities: Successful writing assignments may be published on the iPleaders blog, reaching over a million visitors.
Specific learning objectives
- Role and Function of Privacy Teams: Understand how privacy teams operate within global corporations and startups, and learn about the roles of various privacy professionals, including Chief Privacy Officers and Data Protection Officers.
- Data Privacy Compliance and Assessments: Gain practical skills in conducting Data Privacy Impact Assessments and Audits, focusing on compliance with regulations like GDPR.
- Legal Framework and Regulations: Study the GDPR in depth, including its applicability, consent mechanisms, and the roles of data subjects, processors, and controllers. Extend this understanding to data protection laws in the UK, US, Canada, Singapore, Philippines, Hong Kong, UAE, and India.
- Drafting and Reviewing Legal Documents: Learn to draft and review Data Protection Agreements, terms of use for websites, and other templates in accordance with relevant data protection regulations.
- Sector-Specific Data Protection: Address specific data protection concerns in sectors like healthcare, BFSI (Banking, Financial Services, and Insurance), and technology, and learn how to review related agreements.
- Privacy Governance and Compliance Programs: Develop skills to build and maintain a privacy governance framework and a data protection compliance program, including updating internal policies and liaising with regulatory bodies.
- Handling Data Breaches and Legal Actions: Learn procedures for conducting privacy due diligence, responding to data breaches, and managing legal actions such as filing and responding to complaints with Data Protection Authorities and pursuing damages or collective actions for data breaches.
What kind of assignments will you get?
- GDPR Applicability and Roles: Analyze the service agreement between MarketNums Ireland and MarketAll India to determine GDPR applicability, data transfer issues, and identify the processor and controller roles.
- HIPAA Compliance Report: Develop a report outlining HIPAA compliance requirements for Technocures LLC's new telemedicine business.
- Privacy Policy Creation: Craft a GDPR-compliant privacy policy for UpAds, a Finland-based marketing service aggregator with a mobile app.
- Data Protection Contract Checklist: Generate a checklist for Neverland Finance to ensure data protection when contracting with software developers.
- Data Transfer Clauses: Write specific clauses for a Data Protection Agreement regarding international data transfers for Flinch, a Swedish company providing PaaS services.
Training Methodology

Online Access
Continuous online access to study materials through a learning management system and mobile apps for Android and iOS.

Hard Copy Study Material
Hard copy study materials are couriered directly to your address.

Practical Exercises
Weekly practical exercises with written feedback to enhance learning.

Live Online Classes
Weekly live video classes for specific US contract drafting instruction, with opportunities for questions and personalized feedback. Recordings are available for missed sessions.

Convenient Timing
Classes are scheduled post-work hours, typically on Sunday afternoons or weekday evenings from 8-9 PM.

Live Doubt Clearing
You can ask questions, get your doubt cleared live as well as through online forums
Certification
This course is recognized by the National Skill Development Corporation, a PPP under the Ministry of Skill Development and Entrepreneurship of the Government of India. You will receive a certificate cobranded by NSDC and Skill India on successful completion.
This is how the certificate from NSDC and Skill India will look as per the current applicable format (may change as per the approval authorities):
Money back guarantee
If you take this course, follow it diligently for a month, attend all classes and do all the exercises but still do not find value in it, or are not able to understand or follow it or not find it good for any reason, we will refund the entire course fee to you. It is a 100% money-back guarantee with only one condition, you must pursue it properly for a month. If you don’t find it valuable after that, get your entire money back.
Client Opportunities & Recruitment Support where required
- Job Placement Assistance: High-performing students receive help securing jobs, internships, and assessment internships in reputable law firms, companies, and with distinguished lawyers.
- Profile Building: Assistance in enhancing LinkedIn profiles and presence on freelancing platforms to attract potential employers and clients.
- Interview Preparation: Expert guidance on interview techniques, with mock interviews available on demand.
- Regular Opportunities: Weekly sharing of multiple internship and recruitment opportunities via our WhatsApp group.
- Diverse Internships: Support in securing internships not only in law firms and chambers but also with innovative startups across various sectors.
- Personalized Career Pathways: Mentorship to help students carve unique career paths based on their personal interests, avoiding the conventional job search rat race.
- Daily Client Opportunities: Frequent sharing of varied client opportunities, from contract drafting to complex international taxation, to help practicing advocates expand their practices.
Industry Academia Panel

Esha Shekhar,
Independent Corporate Counsel | Corporate Advisory and Compliance | Trainer- POSH and gender laws
Here are some of our faculty members
Syllabus
Introduction to Data Collection, Processing, Protection and transfer 
Why is data sought to be protected?
Different types of data
Personal data and its subcategories
Transaction-related data and preferences
Business entity-related data
Economy related data
Sensitive and non-sensitive data
Anonymized data
Ownership and collection of data
How do businesses get access to data
Generating data v. collecting data
Controllers, processors and sub-processors
What rights do consumers have over data collected from them?
Role and principles for obtaining consent in data collection
What is data sovereignty and data localisation?
Can governments collect and control citizens’ data?
Open source databases and data in the public domain
Data commodification: under what conditions can you buy and sell data?
Case Study
Managing data transfers
Case Study: Having your own internal data transfer network: Liink by JP Morgan
Data retention and managing data graveyards
What is big data and for whom is this relevant?
Anonymised, pseudonymised data and encrypted data
Data sets, data collection points and processes in specific industries: BFSI, Retail, E-Commerce, Healthcare, Education, Software, Consulting, Real estate, infrastructure and smart cities, Media and entertainment, Law and justice, Pharma, Advertising, Supply chain and logistics, Security and defence, Agritech, R&D
Consequences of data protection violations
Exorbitant Domestic and Cross border Fines
Third party indemnity claims
Reputational consequences
Inability to secure new business
Data Processing Agreements and related work 
Requirements under GDPR and other laws to enter into legal contracts
Common Data Protection Agreements and review work
Outsourcing (Controller-Processor) Agreements
How to review terms and conditions of use of websites
How to review privacy policies so they are compliant with data protection laws
Reviewing and updating templates
Addendums
Data protection concerns in Healthcare and review of processing agreements
Who are likely to be processors for different types of healthcare organisations
- Contract Research Organisation (CRO) Agreements
- Investigator Sponsored Trials (IST) Agreements
- Agreements with Healthcare Professionals / Healthcare Organisations (HCP/HCO)
What should you check in agreements with processors in healthcare organisations
Data protection concerns in the BFSI sector and review of agreements
Who are likely to be processors in the case of banking, financial services and insurance companies
- Secure Vendor and Third Party Service Providers Management and appropriate contractual clauses in Vendor Agreements
- Outsourced cloud computing
- Managed Security Service Providers
What should you check agreements with processors in banking, financial services and insurance companies
Data Protection concerns for SaaS companies, E-commerce companies and Social Media companies
Who are likely to be processors in the case of SaaS companies, E-commerce companies and Social Media companies
- Drafting Terms and Conditions of use and Data Protection Agreements for Saas, E-commerce and Social Media companies
- Drafting Privacy Policies and Privacy Notices for SaaS, E-commerce and Social Media Companies
Standard Contractual Clauses in EU
Compliance and Governance requirements 
Assessing impact of new data protection regulations
How to keep tab of constant legislative changes
Drawing up impact assessment reports
Developing or amending compliance programs
Building a privacy governance framework
Choosing the right privacy governance model
Setting up Data Privacy / Information governance committees
How to update internal policies in compliance with data protection regulations
Setting up escalation mechanisms
What is a data protection compliance programme and how to implement itb
Identify and map the data and data flow
Analysing the applicable legal requirements
Create guidelines and playbooks for documenting and tracking obligations related to privacy controls for the program
Building the compliance roadmap
Developing appropriate internal policies
Liaising with regulators and product teams
Reporting and record maintenance requirements in relation to data protection
Data protection disputes and litigation 
Filing complaints with Data Protection Authorities
Damages claims
Collective and representative actions
Injunctive relief
Claims under competition law
Privacy Risk Management 
How to conduct privacy due diligence
When and how to conduct a Data Protection Impact Assessment
Third party vendor management
Investigating data breaches
Conducting Data Privacy Audits
Creating Privacy Roadmaps and Annual Processes
Data protection legislations in the EU: EU GDPR 
Introduction to EU GDPR
Other Data Protection Legislation in Europe:
Data Protection Authorities in Europe
How to implement changes to key business functions to implement GDPR compliance
Consent under GDPR
Lawful processing under GDPR
Responsibilities of data processors and data controllers
Rights of customers, employees and other “data subjects”
Sanctions and consequences of non-compliance with GDPR
Data protection laws in European Countries 
Data Protection laws in France
Data Protection authorities in France: Commission National Informatique & Libertes (CNIL)
Data Protection laws in Germany
Data Protection Authorities in Germany:
Data Protection laws in Switzerland
Data Protection Authorities in Switzerland
Data Protection laws in Ireland
Data Protection in UK post Brexit 
Data Protection laws in the UK
Data Protection Authorities in the UK: The Information Commissioner’s Office
Data protection laws in the US: Federal and State laws 
Federal Laws:
Data protection laws of some important US states:
Major requirements under US State laws:
Data protection authorities and regulators in the US
Data Protection Law in Canada 
Basic principles of data protection law in Canada
Data Protection laws in Canada: Federal Laws
Data Protection laws in Canada: Provincial Laws
Data Protection Authorities in Canada
Data Protection Law in South East Asia 
Data protection laws in Singapore
Data Protection Authorities in Singapore: Personal Data Protection Commission and Advisory Committee
Data protection laws in Hongkong
Data Protection Authorities in Hongkong: Office of the Privacy Commissioner for Personal Data, Hongkong
Data protection laws in Philippines
Data Protection Authorities in Philippines: National Privacy Commission
Data Protection Regime: Middle East and India 
Data Protection laws in UAE: Dubai & Abu Dhabi
Criminal Offences covered in the Penal Code relating to publishing or unlawful disclosure of personal data
Articles of Federal laws penalising certain acts of data breaches such as intercepting phone calls, illegally accessing websites
Federal Law governing collection, processing and transfer of healthcare data
Regulatory Framework for Internet of Things (IoT)
Laws applicable within the Dubai International Financial Centre: Data Protection Law DIFC Law No. 5 of 2020
Laws applicable within the Abu Dhabi Global Market: Data Protection Regulations 2021
Data protection laws in India: The Personal Data Protection Bill
How to prepare for compliance with the Personal Data Protection Bill
Transition plan for existing businesses and cross border contracts once the bill is passed the impending Personal Data Protection Act on cross border contracts and agreements
Rights of a data ‘principal’
Obligations of a data ‘fiduciary’
Conditions for obtaining valid consent
Exemptions from consent
Requirement of data protection impact assessments and audits
Duties of a data protection officer
Special provisions for processing data of children
Restrictions on transfer and processing of data outside India
Exemptions from compliance
Powers of Data Protection Authority
Personal Data Protection Bill vs. other data protection legislations such as EU GDPR
Templates:
Organization-level privacy policies
Privacy notice
Audit template for independent auditor
Course Plan
Standard
₹ 66000
incl. of all charges
Printed study material (by courier)
2 practical exercises/ Drafting exercises per week (24 weeks)
1-2 online live class/week
Get digital access to entire study material
Access on LMS, Android & iOS app
Instructor feedback on assignments
Instructor-led course with online live classes
Online exams (give exams as per your convenience on given time slots)
Certificate (by courier)
CV enhancement
Coaching for professional networking
Internship & job support
Interview preparation support
Content access for 3 years
Top performers are recommended for jobs and client opportunities