CIPP E Certification Prep Course 2025 with Exam Kit

Explore the European data protection framework from UDHR, ECHR, ICCPR, EU Charter to OECD guidelines, Convention 108 and 108+, and the Treaty of Lisbon, culminating in GDPR.

Map the key EU institutions and their roles in data protection, from the Council of Europe and ECHR to the European Commission, Parliament, Council, and CJEU, including landmark rulings.

Explore how GDPR article 32 links risk-based security to proportionate technical and organizational measures, including encryption, access controls, pseudonymization, state-of-the-art considerations, cost considerations, policies, training, incident response, and regular testing.

Define personal data breaches under the GDPR and distinguish confidentiality, availability, and integrity breaches; learn the 72-hour notification window under articles 33 and 34 and apply the EDPB guidelines.

Master the right of access under Article 15, including what must be provided: data copy, supplementary information, timeframes, fee rules, and handling of excessive requests per EDPB guidelines 01-2022.

Understand the right of data portability under article 20 and its goal to empower user autonomy. See machine-readable formats and direct transfer between controllers under consent or contract.

Learn how Article 23 enables targeted restrictions on data subject rights, including grounds, proportionality, and balancing tests guided by the EDPB, plus handling manifestly unfounded or excessive requests.

Explore all six lawful bases for personal data processing under Article 6, including consent, contractual necessity, legal obligation, vital interests, public interest, and legitimate interests, with assessment guidance and examples.

Special category data faces a strict two-tier rule: a general Article 9.1 prohibition with permissible Article 9.2 exceptions. Focused usage includes employment, healthcare, and research, guided by EDPB guidelines.