Image

Navigation

money icon Duration - 1 Year, 8-10 hours/week
calender icon Course fee: - INR 66000

This course is recognized by the National Skill Development Corporation, a PPP under the Ministry of Skill Development and Entrepreneurship of the Government of India. You will receive a certificate cobranded by NSDC and Skill India on successful completion.

Introduction

Post-pandemic, the importance of data protection and privacy has escalated due to increased remote work, internet usage, and cyber threats, leading to global spikes in data breaches.

Key Developments

  • Cybercrime Surge: 2020 marked a "cyber pandemic" with cyber attacks, including a fivefold increase against the WHO. Annual cybercrime costs may reach $10.5 trillion by 2025.
  • Company Vulnerabilities: Notable data leaks have affected large and small companies, including Microsoft and Twitter, exacerbated by the shift to remote work.
  • Legislative Responses: Globally, strengthened data privacy laws now require better data safeguards, fueling a surge in data protection careers.
  • Compliance Requirements: Entities handling EU residents' data must comply with GDPR, prompting updates in data protection laws worldwide.

Market Trends

  • Consumer Awareness: Growing awareness of data protection has led to significant business risks and customer losses for non-compliant companies.
  • Regulatory Penalties: Increasing fines for data breaches highlight the rising costs and reputation risks, such as a notable €10.4 million penalty in Germany.
  • Professional Opportunities: Demand for in-house privacy teams and consultants is rising, with critical roles like Data Protection Officer becoming essential.
  • Remote Work Potential: Tasks like GDPR compliance are increasingly remote, supported by platforms like Upwork.
  • Career Paths: Significant opportunities exist for professionals with skills in law, accounting, and IT to specialize in data protection and privacy.

How can a young lawyer, accountant or company secretary build a career in this area?

  • Core Principles: Master key concepts such as privacy-by-design to effectively draft and implement privacy notices and policies.
  • Skill Development: Learn to draft technical and data processing clauses, and perform audits and impact assessments.
  • Practical Training: Pursue hands-on training to handle real-world data protection tasks, beyond what's covered in typical certification courses.
  • Build a Portfolio: Create a portfolio of work samples and publish articles on data protection across various jurisdictions to showcase expertise.
  • Networking: Engage with the privacy community through events and online forums to find mentors and job opportunities.
  • Remote Opportunities: Explore remote and freelance roles, such as Data Protection Officer, which may not require specific local qualifications.
  • Job Preparation: Stay updated on the latest data protection issues to enhance your proposals and perform well in interviews.
  • Utilize Existing Skills: Apply your legal, accounting, or secretarial knowledge to understand and navigate compliance issues.
  • Certifications and Beyond: Supplement foundational certifications like CIPP with practical experience to increase your marketability.

Who should take this course?

  • HR Professionals: Ideal for those aiming to manage employee data in compliance with data protection laws.
  • Commerce Students: Beneficial for those in operations, sales, marketing, and related fields.
  • IT Professionals: Suitable for those looking to enhance their organization's data protection and privacy strategies.
  • Young Lawyers: Perfect for those transitioning to technology law and seeking roles in startups, law firms, or corporate privacy teams.
  • In-House Counsels: Designed for counsels aiming to handle global data protection and privacy issues within their organizations.
  • Chartered Accountants and Company Secretaries: Great for professionals offering specialized, high-value technology-related services.
  • Law Students: Ideal for those interested in a career in technology law, whether in law firms or corporate teams.

What will you learn from this course?

  • Data Types and Privacy: Understand the distinctions between personal, sensitive, and other data types, and the significance of data protection.
  • Sector Insights and Employer Potential: Learn which sectors handle large amounts of data, presenting potential employment opportunities.
  • Cross-Border Data Concerns: Explore concerns related to data collection and cross-border transfers, including drafting data protection agreements.
  • Compliance and Governance: Gain insights into creating compliance programs, developing internal policies, and collaborating with regulators.
  • Disputes and Risk Management: Discover strategies for handling disputes and conducting risk assessments in data protection.
  • Global Data Protection Laws: Study data protection laws across key regions including the EU, US, Canada, Asia, and the UAE.

Who will be your potential employers or clients?

  • Large Multinationals: Companies with dedicated privacy and data protection departments seeking employees knowledgeable in multi-jurisdictional laws.
  • Startups: Expanding globally, needing compliance with international data protection regulations but unable to afford large compliance teams.
  • Tech Law Firms: Small to medium-sized firms worldwide looking to outsource paralegal work remotely to build capacity cost-effectively.
  • Small Businesses: Seeking guidance on complying with data protection laws for their websites and agreements.
  • Consumer Associations: Engaging in class action lawsuits against major companies for data breaches, like the significant case against British Airways in the UK.

What is unique about this course?

  • Comprehensive Legislation Coverage: Delivers in-depth introductions to data protection laws from key global regions, including legislative updates.
  • Demanding and Detailed: Requires completion of multiple assignments, with an intensive 5-6 hour weekly commitment outside of class.
  • Expert-Led Interactive Classes: Features discussions and extensive support for doubt resolution both in and out of class.
  • Personalized Coaching: Offers individual attention and assistance throughout the course from dedicated trainers and course anchors.
  • Constructive Feedback: Provides detailed feedback on assignments and additional support through forums and a real-time WhatsApp group.
  • Publishing Opportunities: Successful writing assignments may be published on the iPleaders blog, reaching over a million visitors.

Specific learning objectives

  • Role and Function of Privacy Teams: Understand how privacy teams operate within global corporations and startups, and learn about the roles of various privacy professionals, including Chief Privacy Officers and Data Protection Officers.
  • Data Privacy Compliance and Assessments: Gain practical skills in conducting Data Privacy Impact Assessments and Audits, focusing on compliance with regulations like GDPR.
  • Legal Framework and Regulations: Study the GDPR in depth, including its applicability, consent mechanisms, and the roles of data subjects, processors, and controllers. Extend this understanding to data protection laws in the UK, US, Canada, Singapore, Philippines, Hong Kong, UAE, and India.
  • Drafting and Reviewing Legal Documents: Learn to draft and review Data Protection Agreements, terms of use for websites, and other templates in accordance with relevant data protection regulations.
  • Sector-Specific Data Protection: Address specific data protection concerns in sectors like healthcare, BFSI (Banking, Financial Services, and Insurance), and technology, and learn how to review related agreements.
  • Privacy Governance and Compliance Programs: Develop skills to build and maintain a privacy governance framework and a data protection compliance program, including updating internal policies and liaising with regulatory bodies.
  • Handling Data Breaches and Legal Actions: Learn procedures for conducting privacy due diligence, responding to data breaches, and managing legal actions such as filing and responding to complaints with Data Protection Authorities and pursuing damages or collective actions for data breaches.

What kind of assignments will you get?

  • GDPR Applicability and Roles: Analyze the service agreement between MarketNums Ireland and MarketAll India to determine GDPR applicability, data transfer issues, and identify the processor and controller roles.
  • HIPAA Compliance Report: Develop a report outlining HIPAA compliance requirements for Technocures LLC's new telemedicine business.
  • Privacy Policy Creation: Craft a GDPR-compliant privacy policy for UpAds, a Finland-based marketing service aggregator with a mobile app.
  • Data Protection Contract Checklist: Generate a checklist for Neverland Finance to ensure data protection when contracting with software developers.
  • Data Transfer Clauses: Write specific clauses for a Data Protection Agreement regarding international data transfers for Flinch, a Swedish company providing PaaS services.

Training Methodology

Online Access

Continuous online access to study materials through a learning management system and mobile apps for Android and iOS.

Hard Copy Study Material

Hard copy study materials are couriered directly to your address.

Practical Exercises

Weekly practical exercises with written feedback to enhance learning.

Live Online Classes

Weekly live video classes for specific US contract drafting instruction, with opportunities for questions and personalized feedback. Recordings are available for missed sessions.

Convenient Timing

Classes are scheduled post-work hours, typically on Sunday afternoons or weekday evenings from 8-9 PM.

Live Doubt Clearing

You can ask questions, get your doubt cleared live as well as through online forums

Certification

This course is recognized by the National Skill Development Corporation, a PPP under the Ministry of Skill Development and Entrepreneurship of the Government of India. You will receive a certificate cobranded by NSDC and Skill India on successful completion.

This is how the certificate from NSDC and Skill India will look as per the current applicable format (may change as per the approval authorities):

screenshot

Money back guarantee

If you take this course, follow it diligently for a month, attend all classes and do all the exercises but still do not find value in it, or are not able to understand or follow it or not find it good for any reason, we will refund the entire course fee to you. It is a 100% money-back guarantee with only one condition, you must pursue it properly for a month. If you don’t find it valuable after that, get your entire money back.

View Refund Policy

Client Opportunities & Recruitment Support where required

  • Job Placement Assistance: High-performing students receive help securing jobs, internships, and assessment internships in reputable law firms, companies, and with distinguished lawyers.
  • Profile Building: Assistance in enhancing LinkedIn profiles and presence on freelancing platforms to attract potential employers and clients.
  • Interview Preparation: Expert guidance on interview techniques, with mock interviews available on demand.
  • Regular Opportunities: Weekly sharing of multiple internship and recruitment opportunities via our WhatsApp group.
  • Diverse Internships: Support in securing internships not only in law firms and chambers but also with innovative startups across various sectors.
  • Personalized Career Pathways: Mentorship to help students carve unique career paths based on their personal interests, avoiding the conventional job search rat race.
  • Daily Client Opportunities: Frequent sharing of varied client opportunities, from contract drafting to complex international taxation, to help practicing advocates expand their practices.

Industry Academia Panel

Image

Esha Shekhar,

Independent Corporate Counsel | Corporate Advisory and Compliance | Trainer- POSH and gender laws

Here are some of our faculty members

Image

KABIR PHADKE,

Associate at Rajaram Legal

Image
Image

RATUL ROSHAN,

Blockchain | Fintech | Data Protection

Image
Image

CHARITARTH BHARTI,

Technology Law and Policy | Digital Rights| Li Ka Shing Scholar, NUS LKYSPP

Image

Syllabus

Introduction to Data Collection, Processing, Protection and transfer Image

ringIcon Why is data sought to be protected?

ringIcon Different types of data

Personal data and its subcategories
Transaction-related data and preferences
Business entity-related data
Economy related data
Sensitive and non-sensitive data
Anonymized data

ringIcon Ownership and collection of data

How do businesses get access to data
Generating data v. collecting data
Controllers, processors and sub-processors
What rights do consumers have over data collected from them?
Role and principles for obtaining  consent in data collection
What is data sovereignty and data localisation?
Can governments collect and control citizens’ data?
Open source databases and data in the public domain
Data commodification: under what conditions can you buy and sell data?

ringIcon Case Study

ringIcon Managing data transfers

What is data localisation and what are issues with cross-border data transfers
How do multinational companies deal with cross-border data transfers
What are the laws governing data transfers in different countries
International agreements: EU-US Privacy Shield
Terrorist Financing Tracking Program (TFTP)
European Commission’s Standard Contractual Clauses(SCCs) for transfers between EU and non-EU countries

ringIcon Case Study: Having your own internal data transfer network: Liink by JP Morgan

ringIcon Data retention and managing data graveyards

ringIcon What is big data and for whom is this relevant?

Anonymised, pseudonymised data and encrypted data
Data sets, data collection points and processes in specific industries: BFSI, Retail, E-Commerce, Healthcare, Education, Software, Consulting, Real estate, infrastructure and smart cities, Media and entertainment, Law and justice, Pharma, Advertising, Supply chain and logistics, Security and defence, Agritech, R&D

ringIcon Consequences of data protection violations

Exorbitant Domestic and Cross border Fines
Third party indemnity claims 
Reputational consequences 
Inability to secure new business

Data Processing Agreements and related work Image

ringIcon Requirements under GDPR and other laws to enter into legal contracts

ringIcon Common Data Protection Agreements and review work

Outsourcing (Controller-Processor) Agreements
How to review terms and conditions of use of websites
How to review privacy policies so they are compliant with data protection laws
Reviewing and updating templates
Addendums

ringIcon Data protection concerns in Healthcare and review of processing agreements

Who are likely to be processors for different types of healthcare organisations
- Contract Research Organisation (CRO) Agreements
- Investigator Sponsored Trials (IST) Agreements
- Agreements with Healthcare Professionals / Healthcare Organisations (HCP/HCO)

What should you check in agreements with processors in healthcare organisations

ringIcon Data protection concerns in the BFSI sector and review of agreements

Who are likely to be processors in the case of banking, financial services and insurance companies
- Secure Vendor and Third Party Service Providers Management and appropriate contractual clauses in Vendor Agreements
            - Outsourced cloud computing
            - Managed Security Service Providers

What should you check agreements with processors in banking, financial services and insurance companies

ringIcon Data Protection concerns for SaaS companies, E-commerce companies and Social Media companies

Who are likely to be processors in the case of SaaS companies, E-commerce companies and Social Media companies
- Drafting Terms and Conditions of use and Data Protection Agreements for Saas, E-commerce and Social Media companies
- Drafting Privacy Policies and Privacy Notices for SaaS, E-commerce and Social Media Companies

Standard Contractual Clauses in EU

Compliance and Governance requirements Image

ringIcon Assessing impact of new data protection regulations

How to keep tab of constant legislative changes
Drawing up impact assessment reports
Developing or amending compliance programs

ringIcon Building a privacy governance framework

Choosing the right privacy governance model
Setting up Data Privacy / Information governance committees

ringIcon How to update internal policies in compliance with data protection regulations

ringIcon Setting up escalation mechanisms

ringIcon What is a data protection compliance programme and how to implement itb

Identify and map the data and data flow
Analysing the applicable legal requirements
Create guidelines and playbooks for documenting and tracking obligations related to privacy controls for the program
Building the compliance roadmap
Developing appropriate internal policies

ringIcon Liaising with regulators and product teams

ringIcon Reporting and record maintenance requirements in relation to data protection

Data protection disputes and litigation Image

ringIcon Filing complaints with Data Protection Authorities

ringIcon Damages claims

ringIcon Collective and representative actions

ringIcon Injunctive relief

ringIcon Claims under competition law

Privacy Risk Management Image

ringIcon How to conduct privacy due diligence

ringIcon When and how to conduct a Data Protection Impact Assessment

ringIcon Third party vendor management

ringIcon Investigating data breaches

ringIcon Conducting Data Privacy Audits

ringIcon Creating Privacy Roadmaps and Annual Processes

Data protection legislations in the EU: EU GDPR Image

ringIcon Introduction to EU GDPR

ringIcon Other Data Protection Legislation in Europe:

ringIcon Data Protection Authorities in Europe

ringIcon How to implement changes to key business functions to implement GDPR compliance

ringIcon Consent under GDPR

ringIcon Lawful processing under GDPR

ringIcon Responsibilities of data processors and data controllers

ringIcon Rights of customers, employees and other “data subjects”

ringIcon Sanctions and consequences of non-compliance with GDPR

Data protection laws in European Countries Image

ringIcon Data Protection laws in France

ringIcon Data Protection authorities in France: Commission National Informatique & Libertes (CNIL)

ringIcon Data Protection laws in Germany

ringIcon Data Protection Authorities in Germany:

ringIcon Data Protection laws in Switzerland

ringIcon Data Protection Authorities in Switzerland

ringIcon Data Protection laws in Ireland

Data Protection in UK post Brexit Image

ringIcon Data Protection laws in the UK

ringIcon Data Protection Authorities in the UK: The Information Commissioner’s Office

Data protection laws in the US: Federal and State laws Image

ringIcon Federal Laws:

ringIcon Data protection laws of some important US states:

ringIcon Major requirements under US State laws:

ringIcon Data protection authorities and regulators in the US

Data Protection Law in Canada Image

ringIcon Basic principles of data protection law in Canada

ringIcon Data Protection laws in Canada: Federal Laws

ringIcon Data Protection laws in Canada: Provincial Laws

ringIcon Data Protection Authorities in Canada

Data Protection Law in South East Asia Image

ringIcon Data protection laws in Singapore

ringIcon Data Protection Authorities in Singapore: Personal Data Protection Commission and Advisory Committee

ringIcon Data protection laws in Hongkong

ringIcon Data Protection Authorities in Hongkong: Office of the Privacy Commissioner for Personal Data, Hongkong

ringIcon Data protection laws in Philippines

ringIcon Data Protection Authorities in Philippines: National Privacy Commission

Data Protection Regime: Middle East and India Image

ringIcon Data Protection laws in UAE: Dubai & Abu Dhabi

Criminal Offences covered in the Penal Code relating to publishing or unlawful disclosure of personal data
Articles of Federal laws penalising certain acts of data breaches such as intercepting phone calls, illegally accessing websites
Federal Law governing collection, processing and transfer of healthcare data
Regulatory Framework for Internet of Things (IoT)
Laws applicable within the Dubai International Financial Centre: Data Protection Law DIFC Law No. 5 of 2020
Laws applicable within the Abu Dhabi Global Market: Data Protection Regulations 2021

ringIcon Data protection laws in India: The Personal Data Protection Bill

How to prepare for compliance with the Personal Data Protection Bill
Transition plan  for existing businesses and cross border contracts once the bill is passed   the impending Personal Data Protection Act on cross border contracts and agreements
Rights of a data ‘principal’
Obligations of a data ‘fiduciary’ 
Conditions for obtaining valid consent
Exemptions from consent
Requirement of data protection impact assessments and audits
Duties of a data protection officer  
Special provisions for processing data of children
Restrictions on transfer and processing of data outside India
Exemptions from compliance 
Powers of Data Protection Authority
Personal Data Protection Bill vs. other data protection legislations such as EU GDPR

ringIcon Templates:

Organization-level privacy policies
Privacy notice 
Audit template for independent auditor

Course Plan

Standard

₹ 66000

incl. of all charges

Printed study material (by courier)
2 practical exercises/ Drafting exercises per week (24 weeks)
1-2 online live class/week 
Get digital access to entire study material
Access on LMS, Android & iOS app
Instructor feedback on assignments
Instructor-led course with online live classes
Online exams (give exams as per your convenience on given time slots)
Certificate (by courier)
CV enhancement
Coaching for professional networking
Internship & job support
Interview preparation support
Content access for 3 years
Top performers are recommended for jobs and client opportunities