Independent Study Resource

Data Privacy
Fundamentals.

A comprehensive educational library designed to help you understand complex privacy regulations. Structured, rigorous, and self-paced.

EDITION v2.4 GDPR • CCPA • PIPEDA
GDPR Principles Data Subject Rights International Transfers Compliance Enforcement EDPB Guidelines Schrems II Article 49 GDPR Principles Data Subject Rights International Transfers Compliance Enforcement EDPB Guidelines Schrems II Article 49
01

Structured Modules

Curated curriculum breaking down the Body of Knowledge.

02

Scenarios

Test your knowledge with difficult, real-world cases.

03

Tracking

Visual analytics and persistent read states.

04

Updated

Reflects latest guidelines and precedents.

Curriculum Overview

Master the regulatory
landscape.

MOD // 01

Origins &
History

  • Data protection power, people, and personal information
  • Hesse (Germany) to Sweden: Early laws
  • OECD Guidelines and CoE Convention 108
  • Evolution: Directive 95/46/EC to GDPR
MOD // 02

EU
Institutions

  • History of EU treaties and integration
  • Institutions (Parliament, Commission, Council)
  • Constitutional principles: Supremacy & Direct Effect
  • The role of the CJEU in privacy
MOD // 03

Core
Concepts

  • Personal Data vs. Special Categories (Art 9)
  • The 7 Principles (Lawfulness, Fairness, Minimisation...)
  • Controllers, Processors, and Joint Controllers
  • Legal Bases for Processing (Art 6)
MOD // 04 Key Module

Data Subject
Rights

  • Right of Access (Art 15)
  • Right to Rectification (Art 16)
  • Right to Erasure ('Right to be Forgotten') (Art 17)
  • Right to Restriction of Processing (Art 18)
  • Right to Data Portability (Art 20)
  • Right to Object (Art 21)
  • Auto-Decision Making & Profiling (Art 22)
MOD // 05

Intl.
Transfers

  • Adequacy Decisions (Art 45) & The Schrems Legacy
  • Standard Contractual Clauses (SCCs) & IDTAs
  • Binding Corporate Rules (BCRs)
  • Derogations for specific situations (Art 49)
MOD // 06

Practical
Ops

  • RoPA: Building the Article 30 Record
  • DPIA: Running Impact Assessments (Art 35)
  • Breach Mgmt: Response & Notification (Art 33)
  • PbD: Implementing Privacy by Design (Art 25)