Fachkraft für Datenschutz (FDS)

1. Data Protection and Information Security

• Importance of data protection for companies and affected individuals.

• Motivation to maintain data protection and information security in the company.

• Data protection and personal data.

• Differentiation between data protection and information security

• Fundamentals of data protection and relevant legal provisions (e.g., GDPR, BDSG).

• Importance of data protection for companies and affected individuals.

2. EU GDPR

a.) Chapter 1 - General Provisions

• Art. 1-4

• Principles of data protection (e.g., legality, purpose limitation, data minimization).

• Rights of the affected individuals and their implementation (e.g., right to information, right to be forgotten).

b.) Chapter 2 - Principles

• Art. 5-11

• Recitals

c.) Chapter 3 - Rights of the affected person

• Art. 12-23

• Rights of the affected individuals

• Principles of the EU GDPR

d.) Chapter 4 - Responsible Parties and Processors

• Art. 24-43

• Record of processing activities

• Technical data protection - risk management

• Data protection impact assessment (DPIA) and risk assessment.

• Handling of data protection incidents and emergency plans.

• Position and tasks of the DPO

• Data processing in contractual relationships and dealing with processors.

• Certification and certification bodies

• Liability

• Fines

• Criminal consequences

e.) Chapter 5 - Transfer of personal data to third countries or to international organizations

• Articles 44 – 50

• Data transfer subject to appropriate safeguards

• International cooperation

f.) Chapter 8 - Legal remedies, liability, and sanctions

• Articles 77 – 84

• German peculiarities

3. Data Protection Communication and Training

• Raising employee awareness of data protection.

• Training and awareness programs for compliance with data protection policies.

• External communication and cooperation with affected individuals and supervisory authorities.

4. Management Systems

• PDCA cycle and implementation in a data protection management system

• Creation and review of data protection policies and procedures.

• Monitoring compliance with data protection requirements and conducting audits.

• Best practices of a data protection management system