Introduction

Post-pandemic, the importance of data protection and privacy has escalated due to increased remote work, internet usage, and cyber threats, leading to global spikes in data breaches.

Key Developments

Cybercrime Surge: 2020 marked a "cyber pandemic" with cyber attacks, including a fivefold increase against the WHO. Annual cybercrime costs may reach $10.5 trillion by 2025.
Company Vulnerabilities: Notable data leaks have affected large and small companies, including Microsoft and Twitter, exacerbated by the shift to remote work.
Legislative Responses: Globally, strengthened data privacy laws now require better data safeguards, fueling a surge in data protection careers.
Compliance Requirements: Entities handling EU residents' data must comply with GDPR, prompting updates in data protection laws worldwide.

Market Trends

Consumer Awareness: Growing awareness of data protection has led to significant business risks and customer losses for non-compliant companies.
Regulatory Penalties: Increasing fines for data breaches highlight the rising costs and reputation risks, such as a notable €10.4 million penalty in Germany.
Professional Opportunities: Demand for in-house privacy teams and consultants is rising, with critical roles like Data Protection Officer becoming essential.
Remote Work Potential: Tasks like GDPR compliance are increasingly remote, supported by platforms like Upwork.
Career Paths: Significant opportunities exist for professionals with skills in law, accounting, and IT to specialize in data protection and privacy.

How can a young lawyer, accountant or company secretary build a career in this area?

Core Principles: Master key concepts such as privacy-by-design to effectively draft and implement privacy notices and policies.
Skill Development: Learn to draft technical and data processing clauses, and perform audits and impact assessments.
Practical Training: Pursue hands-on training to handle real-world data protection tasks, beyond what's covered in typical certification courses.
Build a Portfolio: Create a portfolio of work samples and publish articles on data protection across various jurisdictions to showcase expertise.
Networking: Engage with the privacy community through events and online forums to find mentors and job opportunities.
Remote Opportunities: Explore remote and freelance roles, such as Data Protection Officer, which may not require specific local qualifications.
Job Preparation: Stay updated on the latest data protection issues to enhance your proposals and perform well in interviews.
Utilize Existing Skills: Apply your legal, accounting, or secretarial knowledge to understand and navigate compliance issues.
Certifications and Beyond: Supplement foundational certifications like CIPP with practical experience to increase your marketability.

Who should take this course?

HR Professionals: Ideal for those aiming to manage employee data in compliance with data protection laws.
Commerce Students: Beneficial for those in operations, sales, marketing, and related fields.
IT Professionals: Suitable for those looking to enhance their organization's data protection and privacy strategies.
Young Lawyers: Perfect for those transitioning to technology law and seeking roles in startups, law firms, or corporate privacy teams.
In-House Counsels: Designed for counsels aiming to handle global data protection and privacy issues within their organizations.
Chartered Accountants and Company Secretaries: Great for professionals offering specialized, high-value technology-related services.
Law Students: Ideal for those interested in a career in technology law, whether in law firms or corporate teams.

What will you learn from this course?

Data Types and Privacy: Understand the distinctions between personal, sensitive, and other data types, and the significance of data protection.
Sector Insights and Employer Potential: Learn which sectors handle large amounts of data, presenting potential employment opportunities.
Cross-Border Data Concerns: Explore concerns related to data collection and cross-border transfers, including drafting data protection agreements.
Compliance and Governance: Gain insights into creating compliance programs, developing internal policies, and collaborating with regulators.
Disputes and Risk Management: Discover strategies for handling disputes and conducting risk assessments in data protection.
Global Data Protection Laws: Study data protection laws across key regions including the EU, US, Canada, Asia, and the UAE.

Who will be your potential employers or clients?

Large Multinationals: Companies with dedicated privacy and data protection departments seeking employees knowledgeable in multi-jurisdictional laws.
Startups: Expanding globally, needing compliance with international data protection regulations but unable to afford large compliance teams.
Tech Law Firms: Small to medium-sized firms worldwide looking to outsource paralegal work remotely to build capacity cost-effectively.
Small Businesses: Seeking guidance on complying with data protection laws for their websites and agreements.
Consumer Associations: Engaging in class action lawsuits against major companies for data breaches, like the significant case against British Airways in the UK.

What is unique about this course?

Comprehensive Legislation Coverage: Delivers in-depth introductions to data protection laws from key global regions, including legislative updates.
Demanding and Detailed: Requires completion of multiple assignments, with an intensive 5-6 hour weekly commitment outside of class.
Expert-Led Interactive Classes: Features discussions and extensive support for doubt resolution both in and out of class.
Personalized Coaching: Offers individual attention and assistance throughout the course from dedicated trainers and course anchors.
Constructive Feedback: Provides detailed feedback on assignments and additional support through forums and a real-time WhatsApp group.
Publishing Opportunities: Successful writing assignments may be published on the iPleaders blog, reaching over a million visitors.

Specific learning objectives

Role and Function of Privacy Teams: Understand how privacy teams operate within global corporations and startups, and learn about the roles of various privacy professionals, including Chief Privacy Officers and Data Protection Officers.
Data Privacy Compliance and Assessments: Gain practical skills in conducting Data Privacy Impact Assessments and Audits, focusing on compliance with regulations like GDPR.
Legal Framework and Regulations: Study the GDPR in depth, including its applicability, consent mechanisms, and the roles of data subjects, processors, and controllers. Extend this understanding to data protection laws in the UK, US, Canada, Singapore, Philippines, Hong Kong, UAE, and India.
Drafting and Reviewing Legal Documents: Learn to draft and review Data Protection Agreements, terms of use for websites, and other templates in accordance with relevant data protection regulations.
Sector-Specific Data Protection: Address specific data protection concerns in sectors like healthcare, BFSI (Banking, Financial Services, and Insurance), and technology, and learn how to review related agreements.
Privacy Governance and Compliance Programs: Develop skills to build and maintain a privacy governance framework and a data protection compliance program, including updating internal policies and liaising with regulatory bodies.
Handling Data Breaches and Legal Actions: Learn procedures for conducting privacy due diligence, responding to data breaches, and managing legal actions such as filing and responding to complaints with Data Protection Authorities and pursuing damages or collective actions for data breaches.

What kind of assignments will you get?

GDPR Applicability and Roles: Analyze the service agreement between MarketNums Ireland and MarketAll India to determine GDPR applicability, data transfer issues, and identify the processor and controller roles.
HIPAA Compliance Report: Develop a report outlining HIPAA compliance requirements for Technocures LLC's new telemedicine business.
Privacy Policy Creation: Craft a GDPR-compliant privacy policy for UpAds, a Finland-based marketing service aggregator with a mobile app.
Data Protection Contract Checklist: Generate a checklist for Neverland Finance to ensure data protection when contracting with software developers.
Data Transfer Clauses: Write specific clauses for a Data Protection Agreement regarding international data transfers for Flinch, a Swedish company providing PaaS services.

Training Methodology

Online Access

Continuous online access to study materials through a learning management system and mobile apps for Android and iOS.

Practical Exercises

Weekly practical exercises with written feedback to enhance learning.

Live Online Classes

Weekly live video classes for specific US contract drafting instruction, with opportunities for questions and personalized feedback. Recordings are available for missed sessions.

Convenient Timing

Classes are scheduled post-work hours, typically on Sunday afternoons or weekday evenings from 8-9 PM.

Live Doubt Clearing

You can ask questions, get your doubt cleared live as well as through online forums

Money back guarantee

If you take this course, follow it diligently for a month, attend all classes and do all the exercises but still do not find value in it, or are not able to understand or follow it or not find it good for any reason, we will refund the entire course fee to you. It is a 100% money-back guarantee with only one condition, you must pursue it properly for a month. If you don’t find it valuable after that, get your entire money back.

View Refund Policy

Client Opportunities & Recruitment Support where required

Job Placement Assistance: High-performing students receive help securing jobs, internships, and assessment internships in reputable law firms, companies, and with distinguished lawyers.
Profile Building: Assistance in enhancing LinkedIn profiles and presence on freelancing platforms to attract potential employers and clients.
Interview Preparation: Expert guidance on interview techniques, with mock interviews available on demand.
Regular Opportunities: Weekly sharing of multiple internship and recruitment opportunities via our WhatsApp group.
Diverse Internships: Support in securing internships not only in law firms and chambers but also with innovative startups across various sectors.
Personalized Career Pathways: Mentorship to help students carve unique career paths based on their personal interests, avoiding the conventional job search rat race.
Daily Client Opportunities: Frequent sharing of varied client opportunities, from contract drafting to complex international taxation, to help practicing advocates expand their practices.

Industry Academia Panel

Esha Shekhar

Independent Corporate Counsel | Corporate Advisory and Compliance | Trainer- POSH and gender laws

Here are some of our faculty members

KABIR PHADKE

Associate at Rajaram Legal

CHARITARTH BHARTI

Technology Law and Policy | Digital Rights| Li Ka Shing Scholar, NUS LKYSPP

Note: This is an indicative list of our guest faculty members and not an exhaustive list. We may change the faculty members at any point based on availability.

Syllabus

INTRODUCTION TO DATA COLLECTION, PROCESSING, PROTECTION AND TRANSFER

Why is data sought to be protected? Different types of data

Personal data and its subcategories
Transaction-related data and preferences
Business entity-related data
Economy related data
Sensitive and non-sensitive data
Anonymized data

Ownership and collection of data

How do businesses get access to data
Generating data v. collecting data
Controllers, processors and sub-processors
What rights do consumers have over data collected from them?
Role and principles for obtaining consent in data collection
What is data sovereignty and data localisation?
Can governments collect and control citizens’ data?
Open source databases and data in the public domain
Data commodification: under what conditions can you buy and sell data?

Case Study Managing data transfers

What is data localisation and what are issues with cross-border data transfers

How do multinational companies deal with cross-border data transfers

What are the laws governing data transfers in different countries

International agreements: EU-US Privacy Shield

Terrorist Financing Tracking Program (TFTP)

European Commission’s Standard Contractual Clauses(SCCs) for transfers between EU and non-EU countries

Case Study: Having your own internal data transfer network: Liink by JP Morgan Data retention and managing data graveyards What is big data and for whom is this relevant?

Anonymised, pseudonymised data and encrypted data
Data sets, data collection points and processes in specific industries: BFSI, Retail, E-Commerce, Healthcare, Education, Software, Consulting, Real estate, infrastructure and smart cities, Media and entertainment, Law and justice, Pharma, Advertising, Supply chain and logistics, Security and defence, Agritech, R&D

Consequences of data protection violations

Exorbitant Domestic and Cross border Fines
Third party indemnity claims
Reputational consequences
Inability to secure new business

DATA PROCESSING AGREEMENTS AND RELATED WORK

Requirements under GDPR and other laws to enter into legal contracts Common Data Protection Agreements and review work

Outsourcing (Controller-Processor) Agreements
How to review terms and conditions of use of websites
How to review privacy policies so they are compliant with data protection laws
Reviewing and updating templates
Addendums

Data protection concerns in Healthcare and review of processing agreements

Who are likely to be processors for different types of healthcare organisations
- Contract Research Organisation (CRO) Agreements
- Investigator Sponsored Trials (IST) Agreements
- Agreements with Healthcare Professionals / Healthcare Organisations (HCP/HCO)

What should you check in agreements with processors in healthcare organisations

Data protection concerns in the BFSI sector and review of agreements

Who are likely to be processors in the case of banking, financial services and insurance companies
- Secure Vendor and Third Party Service Providers Management and appropriate contractual clauses in Vendor Agreements
- Outsourced cloud computing
- Managed Security Service Providers

What should you check agreements with processors in banking, financial services and insurance companies

Data Protection concerns for SaaS companies, E-commerce companies and Social Media companies

Who are likely to be processors in the case of SaaS companies, E-commerce companies and Social Media companies
- Drafting Terms and Conditions of use and Data Protection Agreements for Saas, E-commerce and Social Media companies
- Drafting Privacy Policies and Privacy Notices for SaaS, E-commerce and Social Media Companies

Standard Contractual Clauses in EU

COMPLIANCE AND GOVERNANCE REQUIREMENTS

Assessing impact of new data protection regulations

How to keep tab of constant legislative changes
Drawing up impact assessment reports
Developing or amending compliance programs

Building a privacy governance framework

Choosing the right privacy governance model
Setting up Data Privacy / Information governance committees

How to update internal policies in compliance with data protection regulations Setting up escalation mechanisms What is a data protection compliance programme and how to implement itb

Identify and map the data and data flow
Analysing the applicable legal requirements
Create guidelines and playbooks for documenting and tracking obligations related to privacy controls for the program
Building the compliance roadmap
Developing appropriate internal policies

Liaising with regulators and product teams Reporting and record maintenance requirements in relation to data protection

DATA PROTECTION DISPUTES AND LITIGATION

Filing complaints with Data Protection Authorities Damages claims Collective and representative actions Injunctive relief Claims under competition law

PRIVACY RISK MANAGEMENT

How to conduct privacy due diligence When and how to conduct a Data Protection Impact Assessment Third party vendor management Investigating data breaches Conducting Data Privacy Audits Creating Privacy Roadmaps and Annual Processes

DATA PROTECTION LEGISLATIONS IN THE EU: EU GDPR

Introduction to EU GDPR Other Data Protection Legislation in Europe: Data Protection Authorities in Europe How to implement changes to key business functions to implement GDPR compliance Consent under GDPR Lawful processing under GDPR Responsibilities of data processors and data controllers Rights of customers, employees and other “data subjects” Sanctions and consequences of non-compliance with GDPR

DATA PROTECTION LAWS IN EUROPEAN COUNTRIES

Data Protection laws in France Data Protection authorities in France: Commission National Informatique & Libertes (CNIL) Data Protection laws in Germany Data Protection Authorities in Germany: Data Protection laws in Switzerland Data Protection Authorities in Switzerland Data Protection laws in Ireland

DATA PROTECTION IN UK POST BREXIT

Data Protection laws in the UK Data Protection Authorities in the UK: The Information Commissioner’s Office

DATA PROTECTION LAWS IN THE US: FEDERAL AND STATE LAWS

Federal Laws: Data protection laws of some important US states: Major requirements under US State laws: Data protection authorities and regulators in the US

DATA PROTECTION LAW IN CANADA

Basic principles of data protection law in Canada Data Protection laws in Canada: Federal Laws Data Protection laws in Canada: Provincial Laws Data Protection Authorities in Canada

DATA PROTECTION LAW IN SOUTH EAST ASIA

Data protection laws in Singapore Data Protection Authorities in Singapore: Personal Data Protection Commission and Advisory Committee Data protection laws in Hongkong Data Protection Authorities in Hongkong: Office of the Privacy Commissioner for Personal Data, Hongkong Data protection laws in Philippines Data Protection Authorities in Philippines: National Privacy Commission

DATA PROTECTION REGIME: MIDDLE EAST AND INDIA

Data Protection laws in UAE: Dubai & Abu Dhabi

Criminal Offences covered in the Penal Code relating to publishing or unlawful disclosure of personal data
Articles of Federal laws penalising certain acts of data breaches such as intercepting phone calls, illegally accessing websites
Federal Law governing collection, processing and transfer of healthcare data
Regulatory Framework for Internet of Things (IoT)
Laws applicable within the Dubai International Financial Centre: Data Protection Law DIFC Law No. 5 of 2020
Laws applicable within the Abu Dhabi Global Market: Data Protection Regulations 2021

Data protection laws in India: The Personal Data Protection Bill

How to prepare for compliance with the Personal Data Protection Bill
Transition plan for existing businesses and cross border contracts once the bill is passed the impending Personal Data Protection Act on cross border contracts and agreements
Rights of a data ‘principal’
Obligations of a data ‘fiduciary’
Conditions for obtaining valid consent
Exemptions from consent
Requirement of data protection impact assessments and audits
Duties of a data protection officer
Special provisions for processing data of children
Restrictions on transfer and processing of data outside India
Exemptions from compliance
Powers of Data Protection Authority
Personal Data Protection Bill vs. other data protection legislations such as EU GDPR

Templates:

Organization-level privacy policies
Privacy notice
Audit template for independent auditor

Course Plan

Above prices are inclusive of all applicable taxes and charges.

Standard

RS. 66000 incl. of all charges

Join the waitlist Enroll now

2 practical exercises/ Drafting exercises per week

Article writing assignments (on request)

1 online live class/week

Get digital access to entire study material

Access on LMS, Android & iOS app

Instructor feedback on assignments

Unlimited doubt clearing sessions.

Instructor led course with online live classes

Online exams (give exams as per your convenience on given time slots)

Certificate (by courier)

CV enhancement

Coaching for professional networking

Internship & Job Support

Interview preparation support

Content access for 3 years

Top performers are recommended for jobs and client opportunities (as applicable)

Join the waitlist Enroll now

Diploma in International Data Protection and Privacy Laws

Enrollment Closed