EXIN Privacy & Data Protection Foundation - Including Exam [PDPF-EXIN]

OVERVIEW

EXIN Privacy & Data Protection Foundation (PDPF) covers the main subjects related to the protection of personal data. Candidates benefit from a certification that is designed to validate the required knowledge to help ensure compliance to the General Data Protection Regulation (GDPR). Moreover, with the enormous increase in the use of artificial intelligence, new challenges for data protection have emerged, making it even more critical to address these issues properly to maintain compliance with the GDPR.

Wherever personal data is collected, stored, used, and finally deleted or destroyed, privacy concerns arise. With the EU General Data Protection Regulation (GDPR) the Council of the European Union aims to strengthen and unify data protection for all individuals within the European Union (EU). This regulation affects every organization that processes personal data of EU citizens. The EXIN Privacy & Data Protection Foundation certification covers the main subjects related to the GDPR.

With the enormous increase in use of artificial intelligence (AI), there is more demand for the use of personal data to train the algorithms. This poses new challenges for data protection that must be addressed properly for compliance with the GDPR

OBJECTIVES

• GDPR Scope
• Principle of data processing
• Practice of data processing
• International personal data transfers
• Risk assessment and mitigation

AUDIENCE

Privacy & Data Protection Foundation is designed for all staff who need to have an understanding of data protection and the European legal requirements as defined in the GDPR. This makes it ideal for data protection officers (DPOs), compliance officers, security officers, HR staff, process and project managers.

CERTIFICATION

Exam details:

• Duration:1 hour
• Number of questions:40 (Multiple Choice)
• Pass mark:65%
• Open book:No
• Electronic equipment allowed:No
• Level:Foundation

CONTENT

1. GDPR Scope (12.5%)

• 1.1 Privacy and data protection (5%)
• 1.2 Scope of the GDPR (7.5%)

2. Principles of Data Processing (37.5%)

• 2.1 Stakeholder roles, rights, and obligations (7.5%)
• 2.2 Data protection by design and by default (5%)
• 2.3 Legitimate grounds for processing (5%)
• 2.4 Rights of the data subjects (12.5%)
• 2.5 Principles of processing personal data (7.5%)

3. Practice of Data Processing (10%)

• 3.1 Data governance (2.5%)
• 3.2 Processing online (2.5%)
• 3.3 Using artificial intelligence (AI) (5%)

4. International Personal Data Transfers (15%)

• 4.1 Cross-border transfers within the European Economic Area (EEA) (10%)
• 4.2 Cross-border transfers outside the European Economic Area (EEA) (5%)

5. Risk Assessment and Mitigation (25%)

• 5.1 Data protection impact assessment (DPIA) and prior consultation (7.5%)
• 5.2 Personal data breaches and related procedures (12.5%)
• 5.3 Supervisory authorities (5%)