Certification Study Group - U.S. Private-Sector Privacy (CIPP/US)
2024-08-16 13:00 - 15:00 (America/New_York) | Online
There are many ways to prepare for taking a certification exam from the International Association of Privacy Professionals. No matter how you study, there always seem to be some questions that remain. Privacy Ref can help.
Come prepared to this 2-hour session with questions or areas related to the exam that you want to review. We will be making use of the exam blueprint and body of knowledge provided by the IAPP to focus our discussion.

Artificial Intelligence Governance (AIGP)
2024-08-19 09:00 - 2024-08-20 16:00, 2024-09-05 09:00 - 2024-09-06 16:00, 2024-10-07 09:00 - 2024-10-08 16:00, 2024-11-06 09:00 - 2024-11-07 16:00 | Hybrid (Online & In-Person)
This training teaches critical artificial intelligence governance concepts that are also integral to the AIGP certification exam. While not purely a “test prep” course, this training is appropriate for professionals who plan to certify, as well as for those who want to deepen their AI governance knowledge. Both the training and the exam are based on the same body of knowledge.
WHAT YOU WILL LEARN:
AIGP training teaches how to develop, integrate and deploy trustworthy AI systems in line with emerging laws and policies. The curriculum provides an overview of AI technology, survey of current law, and strategies for risk management, among many other relevant topics.
MODULES:

Module 1: Foundations of artificial intelligence
Defines AI and machine learning, presents an overview of the different types of AI systems and their use cases, and
positions AI models in the broader socio-cultural context.
Module 2: AI impacts on people and responsible AI principles
Outlines the core risks and harms posed by AI systems, the characteristics of trustworthy AI systems, and the
principles essential to responsible and ethical AI.
Module 3: AI development life cycle
Describes the AI development life cycle and the broad context in which AI risks are managed.
Module 4: Implementing responsible AI governance and risk management
Explains how major AI stakeholders collaborate in a layered approach to manage AI risks while acknowledging AI
systems’ potential societal benefits.
Module 5: Implementing AI projects and systems
Outlines mapping, planning and scoping AI projects, testing and validating AI systems during development, and
managing and monitoring AI systems after deployment.
Module 6: Current laws that apply to AI systems
Surveys the existing laws that govern the use of AI, outlines key GDPR intersections, and provides awareness of
liability reform
Module 7: Existing and emerging AI laws and standards
Describes global AI-specific laws and the major frameworks and standards that exemplify how AI systems can be
responsibly governed.
Module 8: Ongoing AI issues and concerns
Presents current discussions and ideas about AI governance, including awareness of legal issues, user concerns, and AI auditing and accountability issues.

CLASS MATERIALS INCLUDE:

Two full days of training
Electronic and hardcopy version of the participant guide
A 1-year IAPP membership with first class (applied to renewal for current IAPP members)
Voucher to sit for the certification exam
Voucher for a Certification Study Group*
Optional refresher course should you fail the IAPP exam **

* Certification Study Group voucher must be used within three months of taking the course.
** The IAPP exam must be taken within three months of completion of the class. Refresher course must be taken within three months of completing the IAPP exam.
*** 1 Year Membership valid with first course taken with Privacy Ref

Purpose and Means CIPP/E Live Training - Aug 20, 21, 27 & 28
2024-08-20 - 2024-08-28 | Virtual
Purpose and Means offers registration with and without exam vouchers
With exam voucher €1695 https://www.purposeandmeans.io/product/iapp-cipp-e-live-training-full-package
Without exam voucher €1295 https://www.purposeandmeans.io/product/iapp-cipp-e-live-training-without-exam
For companies based in Denmark, with a Danish VAT number, we are required to charge 25% VAT (moms) on top of the prices listed. Please contact us in advance of placing your order so that a specific VAT invoice can be issued.
This VAT requirement does not apply to private individuals or companies outside of Denmark.
‍

What’s included

Instruction by IAPP trainer
Digital participant guide (in English or French)
Digital copy of course textbook (in English or French)
Exam voucher (exams can booked in English, French or German)
1 year IAPP membership

Why You Should Take European Data Protection Training
The European Union’s GDPR and the data privacy laws of individual European nations are among the world’s strictest, carrying high fines for improperly handling personal information. IAPP European Data Protection Training, the training aligned with ANSI/ISO-accredited CIPP/E certification, is in-depth instruction on understanding and applying laws governing data collection, processing and management.

Who Should Train
European and international data protection professionals who manage or work within GDPR and European national compliance frameworks, and/or those pursuing CIPP/E certification. IAPP European Data Protection training helps satisfy GDPR requirements for DPOs (data protection officers) responsible for monitoring compliance, managing data protection activities, etc.

What You Will Learn
CIPP/E training builds a deep understanding of European laws, regulations and policy frameworks. The curriculum includes explanations of European regulatory structures; concepts of data protection; major laws including the GDPR and the ePrivacy Directive; and more.

Course delivery
The course is delivered live online using MS Teams (or GoToWebinar) by an IAPP Faculty trainer. In order to minimise prolonged screen time the course is delivered over four half-days:
Day 1
Module 1: Data protection laws
Module 2: Personal data
Module 3: Controllers and processors
Day 2
Module 4: Processing personal data
Module 5: Data subject rights
Day 3
Module 6: Information provision obligations
Module 7: International data transfers
Module 8: Compliance considerations
Day 4
Module 9: Security of processing
Module 10: Accountability
Module 11: Supervision and enforcement

Other information
The Body of Knowledge for the CIPP/E course can be viewed and downloaded from here.
Be aware that IAPP recommend approximately 30 hours of additional study of course materials and resources is required to adequately prepare for the exam.
You are encouraged to read the IAPP’s Certification Candidate Handbook for additional information about IAPP’s courses and preparation required to sit the exam.
If you take the CIPP/E exam within 3 months of the course and do not pass, you are welcome to join a future course free of charge.
Please review the Online Training Policy for IAPP Courses that details information about cancellations.
‍
Processing and transfer of your personal data to the USA
When you enrol on an IAPP course run by Purpose and Means, various personal data about you will be registered. For details on how your personal data is processed, please view the Purpose and Means Privacy Notice.
The course you enrol on is offered in cooperation with the International Association of Privacy Professionals (IAPP), 75 Rochester Ave., Portsmouth, NH 03801 USA.
Once you register for the course, your name, email address, and existing IAPP membership status will be transferred to the IAPP in the USA. This is necessary in order to complete the course registration, and to allow you access to online training material, register you as a member of the IAPP, and make the required arrangements before a certification exam, if relevant.
The transfer of your personal data to the IAPP in the USA is necessary for the performance of the training course contract between you and Purpose and Means, and for the performance of the contract concluded in your interest between Purpose and Means and the IAPP.

Explainability by Design: Shaping the Future of AI Accountability and Digital Agency | Privacy Engineering & Technology Education Discussion (PETed)
2024-08-22 12:00 - 13:00 | https://iopd.whereby.com/peted-discussion
Join our IOPD Privacy Engineering & Technology Education Discussion (PETed) Series! The format of the webinar will be a recorded 10-minute introduction followed by a 40-minute informal discussion and interaction with members of the IOPD. The goal will be a discussion on how to solve a specific privacy problem or privacy related resource topic and the latest implementation techniques for some of the biggest challenges like synthetic data, zero-knowledge proofs, homomorphic encryption, and translucent databases.
The participants will be asked to bring questions related to the topic. Come back the fourth Thursday of every month for a new discussion, new speaker, and new insights on the most cutting-edge privacy challenges!

Date & Time:
August 22, 2024 @ 12:00 PM EDT / 6:00 PM CEST

Topic:
Explainability by Design: Shaping the Future of AI Accountability and Digital Agency

Synopsis:
Shoshana advocates for the establishment and recognition of digital agency and understanding as a fundamental human right, serving as a reinforcement and guiding principle for the evolving legal frameworks working to keep pace with technological innovation. This right bridges the gaps between requirements around transparency and around mere transparency and the requisite layers of explainability, ensuring AI systems provide meaningful and accessible explanations of their decision-making processes.
She also advocates for the criticality of a time bound global mandate for new technology to be explainable by design by a specific date, and to have a lessened impact on the environment. This mandate would create an incentive for investment in furthering AI technology development to allow the systems to be mightier (to support explainability) and lighter (to facilitate the integration of standards to reduce environmental impact.)
Just as the integration of privacy notices became essential for compliance and trust, and accountability in business transactions, the inevitability of explainability notices and addenda in AI is undeniable. Both businesses and individuals require these notices ( and explainability attendant same) to operate effectively within an AI technology ecosystem. The evolution of privacy laws demonstrated that transparency and accountability are fundamental to building trust and meeting regulatory standards, and analogous mechanisms are needed to facilitate explainability and accountability in business and consumer interactions in the age of AI.

Problem Statement:
Despite current and evolving regulatory frameworks aiming to address transparency and accountability in AI, the rapid advancement of technology continues to expand the gaps between regulatory requirements, the needs of individuals and businesses, and the ability of AI technologies to provide the necessary levels of explainability. These gaps hinder effective oversight, erode the trust of users and impacted individuals, and compromise environmental sustainability. Mandating explainability by design is essential to bridge these gaps, ensuring that AI systems can be transparent, explained, and meet regulatory standards and societal and environmental expectations.

Pre-Discussion Resources:

HOME | I Statements (aideiprivacystatements.com) (Explainability by Design Resources are at the bottom of the page.)
Explainability Case Studies
Explainability Rubric
Advancing Explainability through AI Literacy and Design Resources
A Taxonomy of Explanations to Support Explainability by Design
One proposed approach: Explainability by Design: A Methodology to Support Explanations in Decision-Making Systems (arxiv.org)
Explainable Convolutional Neural Networks

Speaker:

Shoshana Rosenberg
Shoshana Rosenberg is a thought leader at the intersection of privacy law and DEI, a seasoned corporate attorney and business executive with a broad global purview and over 16 years in international data protection law. She is also the co-founder of Women in AI Governance and the founder of SafePorter, a PICCASO EU award-winning B Corp enabling privacy-by-design DEI and engagement programs and true data minimization that protects individuals and eliminates organizational data risk around DEI. Shoshana is a founding member and strategic programs advisor at Logical AI Governance, where she developed the PRISM Framework and the AI Governance training programs to enable privacy and compliance professionals to build, operationalize, and refine AI Governance programs. A U.S. Navy veteran, data ethics and emerging technology fanatic, and a member of the IAPP Diversity in Privacy Advisory Board, Shoshana is a passionate advocate for social entrepreneurship and inclusion by design.

Moderator:
Nicole Nguyen
Nicole Nguyen is an enthusiastic privacy professional, deftly bridging technology, business, and law. Beginning in intellectual property and patent prosecution, she gained practical legal insights and technical acumen, which she later applied to data privacy across various regulated industries. She honed her skills across operations, regulatory analysis, and engineering, to streamline data handling, shape privacy policies, and drive privacy-by-design principles. Recognized for her leadership and technical prowess, Nicole guides strategic decisions, resolves complex issues, and bolsters business resilience. Her passion lies in crafting comprehensive data governance programs, weaving security, privacy, and risk disciplines into robust frameworks that safeguard business value and promote a future-ready, privacy-conscious culture. B.S. Chemical and Electrical Engineering and M.S. Information Systems, Cybersecurity and Business Intelligence.

The IOPD Privacy Engineering & Technology Education Discussion (PETed) Series is a members-only event. Join as an Ambassador before the 1st of each month to get invited to this month’s event! Please reach out to a current member to be invited as a guest. If you are already a member, subscribe to our PETed Mailing List for announcements and monthly invitations!

Certification Study Group - Privacy Program Management (CIPM)
2024-08-23 13:00 - 15:00, 2024-09-20 13:00 - 15:00 | Online

Purpose and Means CIPP/E In-Person Training Copenhagen - Aug 29-30
2024-08-29 - 2024-08-30 | Charlottehaven, Hjørringgade 12C, 2100, Copenhagen, Denmark
Purpose and Means offers registration with and without exam vouchers
With exam voucher €2385 https://www.purposeandmeans.io/product/iapp-cipp-e-in-person-in-copenhagen
Without exam voucher €1845 https://www.purposeandmeans.io/product/iapp-cipp-e-in-person

For companies based in Denmark, with a Danish VAT number, we are required to charge 25% VAT (moms) on top of the prices listed. Please contact us in advance of placing your order so that a specific VAT invoice can be issued.
This VAT requirement does not apply to private individuals or companies outside of Denmark.
‍

What’s included

Instruction by IAPP trainer (in English)
Printed participant guide (in English)
Digital participant guide (in English)
Digital copy of course textbook (in English)
Exam voucher
1 year IAPP membership
Morning and afternoon refreshments
Lunch

Why You Should Take European Data Protection Training
The European Union’s GDPR and the data privacy laws of individual European nations are among the world’s strictest, carrying high fines for improperly handling personal information. IAPP European Data Protection Training, the training aligned with ANSI/ISO-accredited CIPP/E certification, is in-depth instruction on understanding and applying laws governing data collection, processing and management.
Who Should Train
European and international data protection professionals who manage or work within GDPR and European national compliance frameworks, and/or those pursuing CIPP/E certification. IAPP European Data Protection training helps satisfy GDPR requirements for DPOs (data protection officers) responsible for monitoring compliance, managing data protection activities, etc.
What You Will Learn
CIPP/E training builds a deep understanding of European laws, regulations and policy frameworks. The curriculum includes explanations of European regulatory structures; concepts of data protection; major laws including the GDPR and the ePrivacy Directive; and more.
Location
The course will be held at Charlottehaven, Hjørringgade 12C, 2100 Copenhagen, Denmark. Course participants also have free access to Charlottehaven’s health club facilities, classes, pool and sauna on the course days.
Hotel rooms are available with a 10% discount for course participants. A discount code is available once a course is booked with Purpose and Means.
‍
Course delivery
The course is taught in a classroom environment over 2 days by Clara Kromann:
Day 1
Module 1: Data protection laws
Module 2: Personal data
Module 3: Controllers and processors
Module 4: Processing personal data
Module 5: Data subject rights
Day 2
Module 6: Information provision obligations
Module 7: International data transfers
Module 8: Compliance considerations
Module 9: Security of processing
Module 10: Accountability
Module 11: Supervision and enforcement
Other information
The Body of Knowledge for the CIPP/E course can be viewed and downloaded from here.
Be aware that IAPP recommend approximately 30 hours of additional study of course materials and resources is required to adequately prepare for the exam.
You are encouraged to read the IAPP’s Certification Candidate Handbook for additional information about IAPP’s courses and preparation required to sit the exam.
If you take the CIPP/E exam within 3 months of the course and do not pass, you are welcome to join a future course free of charge.
Please review the Online Training Policy for IAPP Courses that details information about cancellations.
‍
Processing and transfer of your personal data to the USA
When you enrol on an IAPP course run by Purpose and Means, various personal data about you will be registered. For details on how your personal data is processed, please view the Purpose and Means Privacy Notice.
The course you enrol on is offered in cooperation with the International Association of Privacy Professionals (IAPP), 75 Rochester Ave., Portsmouth, NH 03801 USA.
Once you register for the course, your name, email address, and existing IAPP membership status will be transferred to the IAPP in the USA. This is necessary in order to complete the course registration, and to allow you access to online training material, register you as a member of the IAPP, and make the required arrangements before a certification exam, if relevant.
The transfer of your personal data to the IAPP in the USA is necessary for the performance of the training course contract between you and Purpose and Means, and for the performance of the contract concluded in your interest between Purpose and Means and the IAPP.

Certification Study Group - European Data Protection (CIPP/E)
2024-09-04 13:00 - 15:00 | Online

Purpose and Means CIPM In-Person Training Copenhagen - Sep 5-6
2024-09-05 - 2024-09-06 | Charlottehaven, Hjørringgade 12C, 2100, Copenhagen, Denmark
Purpose and Means offers courses with and without exam vouchers
With exam voucher €2385 https://www.purposeandmeans.io/product/iapp-cipm-in-person-training-with-exam
Without exam voucher €1845 https://www.purposeandmeans.io/product/iapp-cipm-in-person-training-without-exam

For companies based in Denmark, with a Danish VAT number, we are required to charge 25% VAT (moms) on top of the prices listed. Please contact us in advance of placing your order so that a specific VAT invoice can be issued.
This VAT requirement does not apply to private individuals or companies outside of Denmark.
‍

What’s included

Instruction by IAPP Faculty trainer
Printed participant guide
Digital participant guide
Digital copy of course textbook
Exam voucher
1 year IAPP membership
Morning and afternoon refreshments
Lunch

The Certified Information Privacy Manager (CIPM) is the world’s first and only certification in privacy programme management. When you earn a CIPM, it shows that you know how to make a privacy programme work for your organisation. In other words, you’re the go-to person for day-to-day operations when it comes to data protection.
What you’ll learn

How to create a company vision
How to structure the privacy team
How to develop and implement a privacy program framework
How to communicate to stakeholders
How to measure performance
The privacy program operational life cycle

Location
The course will be held at Charlottehaven, Hjørringgade 12C, 2100 Copenhagen, Denmark. Course participants also have free access to Charlottehaven’s health club facilities, classes, pool and sauna on the course days.
Hotel rooms are available with a 10% discount for course participants. A discount code is available once a course is booked with Purpose and Means.
‍
Course delivery
The course is delivered in-person across 2 full days by Tim Clements:
Day 1
Module 1: Introduction to Privacy Program Management
Module 2: Privacy program framework: Privacy Governance
Module 3: Privacy program framework: Applicable Laws and Regulations
Module 4: Privacy operational life cycle – Assess: Data Assessments
Module 5: Privacy operational life cycle – Protect: Protecting Personal Information
Day 2
Module 6: Privacy operational life cycle – Protect: Policies
Module 7: Privacy operational life cycle – Sustain: Monitoring and auditing program performance
Module 8: Privacy operational life cycle – Sustain: Training and awareness
Module 9: Privacy operational life cycle – Respond: Data subject rights
Module 10: Privacy operational life cycle – Respond: Data breach incident plans
‍
Other information
The Body of Knowledge for the CIPM course can be viewed and downloaded from here.
Be aware that IAPP recommend approximately 30 hours of additional study of course materials and resources is required to adequately prepare for the exam.
You are encouraged to read IAPP’s Certification Candidate Handbook for additional information about IAPP’s courses and preparation required to sit the exam.
If you take the CIPM exam within 3 months of the course and do not pass, you are welcome to join a future course free of charge.
Please review the Online Training Policy for IAPP Courses that details information about cancellations.
‍
Processing and transfer of your personal data to the USA
When you enrol on an IAPP course run by Purpose and Means, various personal data about you will be registered. For details on how your personal data is processed, please view the Purpose and Means Privacy Notice.
The course you enrol on is offered in cooperation with the International Association of Privacy Professionals (IAPP), 75 Rochester Ave., Portsmouth, NH 03801 USA.
Once you register for the course, your name, email address, and existing IAPP membership status will be transferred to the IAPP in the USA. This is necessary in order to complete the course registration, and to allow you access to online training material, register you as a member of the IAPP, and make the required arrangements before a certification exam, if relevant.
The transfer of your personal data to the IAPP in the USA is necessary for the performance of the training course contract between you and Purpose and Means, and for the performance of the contract concluded in your interest between Purpose and Means and the IAPP.
‍

NIST Privacy Framework Practicum Fall 2024
2024-09-09 - 2024-09-13 | Virtual

TEST 2
2024-09-10 08:00 - 17:00

Certification Study Group - Artificial Intelligence Governance (AIGP)
2024-09-13 13:00 - 15:00 | Online

Purpose and Means CIPM Live Training - Sep 17, 18, 24 & 25
2024-09-17 - 2024-09-25 | Virtual
Purpose and Means offers courses with and without exam vouchers
With exam voucher €1695 https://www.purposeandmeans.io/product/iapp-cipm-live-training-full-package
Without exam voucher €1295 https://www.purposeandmeans.io/product/iapp-cipm-live-training-without-exam
For companies based in Denmark, with a Danish VAT number, we are required to charge 25% VAT (moms) on top of the prices listed. Please contact us in advance of placing your order so that a specific VAT invoice can be issued.
This VAT requirement does not apply to private individuals or companies outside of Denmark.
‍

What’s included

Instruction by IAPP Faculty trainer
Digital participant guide
Digital copy of course textbook
Exam voucher
1 year IAPP membership

The Certified Information Privacy Manager (CIPM) is the world’s first and only certification in privacy programme management. When you earn a CIPM, it shows that you know how to make a privacy programme work for your organisation. In other words, you’re the go-to person for day-to-day operations when it comes to data protection.

What you’ll learn

How to create a company vision
How to structure the privacy team
How to develop and implement a privacy program framework
How to communicate to stakeholders
How to measure performance
The privacy program operational life cycle

Course delivery
The course is delivered live online using MS Teams (or GoToWebinar) by an IAPP Faculty trainer. In order to minimise prolonged screen time the course is delivered over four half-days:
Day 1
Module 1: Introduction to Privacy Program Management
Module 2: Privacy program framework: Privacy Governance
Day 2
Module 3: Privacy program framework: Applicable Laws and Regulations
Module 4: Privacy operational life cycle – Assess: Data Assessments
Module 5: Privacy operational life cycle – Protect: Protecting Personal Information
Day 3
Module 6: Privacy operational life cycle – Protect: Policies
Module 7: Privacy operational life cycle – Sustain: Monitoring and auditing program performance
Module 8: Privacy operational life cycle – Sustain: Training and awareness
Day 4
‍
Module 9: Privacy operational life cycle – Respond: Data subject rights
Module 10: Privacy operational life cycle – Respond: Data breach incident plans
‍
Other information
The Body of Knowledge for the CIPM course can be viewed and downloaded from here.
Be aware that IAPP recommend approximately 30 hours of additional study of course materials and resources is required to adequately prepare for the exam.
You are encouraged to read IAPP’s Certification Candidate Handbook for additional information about IAPP’s courses and preparation required to sit the exam.
If you take the CIPM exam within 3 months of the course and do not pass, you are welcome to join a future course free of charge.
Please review the Online Training Policy for IAPP Courses that details information about cancellations.
‍
Processing and transfer of your personal data to the USA
When you enrol on an IAPP course run by Purpose and Means, various personal data about you will be registered. For details on how your personal data is processed, please view the Purpose and Means Privacy Notice.
The course you enrol on is offered in cooperation with the International Association of Privacy Professionals (IAPP), 75 Rochester Ave., Portsmouth, NH 03801 USA.
Once you register for the course, your name, email address, and existing IAPP membership status will be transferred to the IAPP in the USA. This is necessary in order to complete the course registration, and to allow you access to online training material, register you as a member of the IAPP, and make the required arrangements before a certification exam, if relevant.
The transfer of your personal data to the IAPP in the USA is necessary for the performance of the training course contract between you and Purpose and Means, and for the performance of the contract concluded in your interest between Purpose and Means and the IAPP.

U.S. Private-Sector Privacy (CIPP/US)
2024-09-24 09:00 - 2024-09-25 16:00 | Hybrid (Online & In-Person)
U.S. Private-Sector Privacy CIPP/US provides an overview of data protection laws and regulations in the U.S and an understanding of the legal requirements for the responsible transfer of sensitive personal data to/from the U.S., the EU and other jurisdictions. The U.S. Private-Sector Privacy CIPP/US program was the first professional certification ever to be offered in information privacy. The CIPP/US credential demonstrates a strong foundation in U.S. privacy laws and regulations.
The content of the U.S. Private-Sector Privacy CIPP/US courses is integral to broadening your knowledge, educating your privacy team, and put you on the path to obtaining your privacy certifications.
Course Outline:

Module 1: Introduction to privacy
Module 2: Structure of U.S. law
Module 3: General Data Protection Regulation overview
Module 4: The California Consumer Privacy Act
Module 5: Enforcement of U.S. privacy and security laws
Module 6: Information management from a U.S. perspective
Module 7: Federal versus state authority
Module 8: Healthcare
Module 9: Financial privacy
Module 10: Education
Module 11: Telecommunications and marketing
Module 12: Law enforcement and privacy
Module 13: National security and privacy
Module 14: Civil litigation and privacy
Module 15: Legal overview of workplace privacy
Module 16: Privacy before, during and after employment
Module 17: State data security laws
Module 18: Data breach notification laws

Class materials include:

Two full days of training
Electronic and hardcopy version of the textbook and participant guide
A 1-year IAPP membership with first class (applied to renewal for current IAPP members)
Voucher to sit for the certification exam
Voucher for a Certification Study Group*
Optional refresher course should you fail the IAPP exam **

* Certification Study Group voucher must be used within three months of taking the course.
** The IAPP exam must be taken within three months of completion of the class. Refresher course must be taken within three months of completing the IAPP exam.
*** 1 Year Membership valid with first course taken with Privacy Ref

Protecting Children in the Digital Age – Privacy Risks & Rewards | Privacy Engineering & Technology Education Discussion (PETed)
2024-09-26 12:00 - 13:00 | https://iopd.whereby.com/peted-discussion
Join our IOPD Privacy Engineering & Technology Education Discussion (PETed) Series! The format of the webinar will be a recorded 10-minute introduction followed by a 40-minute informal discussion and interaction with members of the IOPD. The goal will be a discussion on how to solve a specific privacy problem or privacy related resource topic and the latest implementation techniques for some of the biggest challenges like synthetic data, zero-knowledge proofs, homomorphic encryption, and translucent databases.
The participants will be asked to bring questions related to the topic. Come back the fourth Thursday of every month for a new discussion, new speaker, and new insights on the most cutting-edge privacy challenges!

Date & Time:
September 26th, 2024 @ 12:00 PM EDT / 6:00 PM CEST

Topic:
Protecting Children in the Digital Age – Privacy Risks & Rewards

Synopsis:
Over the past few years there has been a tsunami of new privacy legislation driven by the EU, UK and US to address user data privacy and online harms and risks to users including children. Industry faces the challenge of aligning numerous regulations at federal and state level in the US and with the EU GDPR, the Digital Services Act and the UK’s Online Safety Act to name just a few. There is a spotlight on age assurance and age verification and increasing requirements for parent consent and controls. Privacy is no longer seen just as a cost centre but as an investment in brand trust and integrity.

Pre-Discussion Resources:

Complying with COPPA: Frequently Asked Questions | Federal Trade Commission
Children and the UK GDPR | ICO
The Children’s code: what is it? | ICO
The Children’s Online Privacy Protection Act (COPPA)
GDPRkids™
UK’s Children’s Code
History of COPPA & GDPR Violations

Speaker:

Claire Quinn, CIPP/e – Chief Privacy Officer
Claire Quinn is a subject matter expert (SME) specializing in COPPA, GDPR, Children’s Code and child privacy and safety in the digital world. She has worked closely with major well-known child directed entertainment brands, third party service providers, moderation companies, CEOP and US law enforcement. Claire also works directly with regulators including the FTC and EU data protection authorities. She is an accredited member of the International Association of Privacy Professionals (IAPP) and has more than 25 years’ experience in media and online.
Her expertise is often called upon by industry and she regularly participates in webinars, panels and events. Claire was on the FTC COPPA Rule review workshop panel in DC and has participated at the IAPP Europe Data Congress in Brussels. Claire contributes to numerous articles and white papers and has written expert witness reports.
Her previous experience includes launching B2C websites for United News & Media, Head of Lycos UK where she helped to launch Europe’s biggest chatroom. In addition, Claire was Chief of Safety at MMO WeeWorld.com, a US virtual world with mobile apps for tweens and teens.

Moderator:
Andrei Dumitru
After working more than ten years in the IT department of an International Organization, I focused in the last years on privacy and data protection. I think privacy is a fundamental right that cannot exist today without computer security so I am always searching to find a balance between both and see how privacy can be embedded into technology. I am particularly interested in privacy by design and dark patterns, and always curious to see how privacy is integrated (or not) in current products and services.

The IOPD Privacy Engineering & Technology Education Discussion (PETed) Series is a members-only event. Join as an Ambassador before the 1st of each month to get invited to this month’s event! Please reach out to a current member to be invited as a guest. If you are already a member, subscribe to our PETed Mailing List for announcements and monthly invitations!

Purpose and Means CIPP/US Live Training - Oct 1-4
2024-10-01 - 2024-10-04 | Virtual
Purpose and Means offers training with and without exam vouchers, for a different price
With Exam €1695 https://www.purposeandmeans.io/product/iapp-cipp-us-live-training-full-package
Without Exam €1295 https://www.purposeandmeans.io/product/iapp-cipp-us-live-training-without-iapp-exam

For companies based in Denmark, with a Danish VAT number, we are required to charge 25% VAT (moms) on top of the prices listed. Please contact us in advance of placing your order so that a specific VAT invoice can be issued.
This VAT requirement does not apply to private individuals or companies outside of Denmark.
‍

What’s included

Instruction by IAPP trainer
Digital participant guide (in English)
Digital copy of course textbook (in English)
1 year IAPP membership

Why You Should Take U.S. Private-Sector Privacy Training
U.S. privacy is a complicated amalgam of federal, state and local privacy regulations. IAPP U.S. Private-Sector Privacy Training, the principle course for the ANSI/ISO-accredited CIPP/US certification program, gives privacy professionals the knowledge to manage compliance within this legal web and minimize the risks of regulatory fines and brand damage.

Who Should Train
Professionals who need in-depth knowledge of the U.S. privacy environment for compliance and other privacy management responsibilities. CIPP/US training will elevate your career prospects and help to prepare you for CIPP/US certification testing.

What You Will Learn
The CIPP/US curriculum provides an in-depth view of U.S. federal and state privacy statutes; detailed analysis of sectoral laws, civil and criminal enforcement; and an overview of the EU’s General Data Protection Regulation and the California Consumer Privacy Act.
‍
Course delivery
The course is delivered live online using MS Teams (or GoToWebinar) by an IAPP trainer. In order to minimise prolonged screen time the course is delivered over four half-days:
Day 1
Module 1: Introduction to privacy
Module 2: Structure of US law
Module 3: General Data Protection Regulation overview
Module 4: California privacy laws
Module 5: Enforcement of US privacy and security laws
‍Day 2
Module 6: Information management from a US perspective
Module 7: Federal versus state authority
Module 8: Healthcare
Module 9: Financial privacy
Day 3
Module 10: Education
Module 11: Telecommunications and marketing
Module 12: Law enforcement and privacy
Module 13: National security and privacy
Module 14: Civil litigation and privacy
Day 4
Module 15: Legal overview of workplace privacy
Module 16: Privacy before, during and after employment
Module 17: State data security laws
Module 18: Data breach notification laws

Other information
The Body of Knowledge for the CIPP/US course can be viewed and downloaded from here.
Be aware that IAPP recommend approximately 30 hours of additional study of course materials and resources is required to adequately prepare for the exam.
You are encouraged to read IAPP’s Certification Candidate Handbook for additional information about IAPP’s courses and preparation required to sit the exam.
If you take the CIPP/US exam within 6 months of the course and do not pass, you are welcome to join a future course free of charge.
Please review the Online Training Policy for IAPP Courses that details information about cancellations.
‍
Processing and transfer of your personal data to the USA
When you enrol on an IAPP course run by Purpose and Means, various personal data about you will be registered. For details on how your personal data is processed, please view the Purpose and Means Privacy Notice.
The course you enrol on is offered in cooperation with the International Association of Privacy Professionals (IAPP), 75 Rochester Ave., Portsmouth, NH 03801 USA.
Once you register for the course, your name, email address, and existing IAPP membership status will be transferred to the IAPP in the USA. This is necessary in order to complete the course registration, and to allow you access to online training material, register you as a member of the IAPP, and make the required arrangements before a certification exam, if relevant.
The transfer of your personal data to the IAPP in the USA is necessary for the performance of the training course contract between you and Purpose and Means, and for the performance of the contract concluded in your interest between Purpose and Means and the IAPP.

Design Assurance Standard Public Launch Webinar
2024-10-01 10:00 - 10:30 | https://iopd.whereby.com/webinar
The Design Process Standard (Process Standard) was adopted in January 2023 with this Design Assurance Standard (Assurance Standard) following two years later. While the Process Standard details the components necessary in a design process to incorporate privacy considerations and reduce privacy risks, this Assurance Standard uses an assurance case to confirm an organization’s claim that a specific product, service, or business process has been designed, developed, or deployed with privacy aforethought.
In other words, the Assurance Standard doesn’t apply to an organization but to a specific object of evaluation. The intent of this certifiable standard is for organizations to demonstrate that they have achieved reasonable assurance around “privacy by design and default” claims.

Registration:
https://instituteofprivacydesign.org/design-assurance-standard-public-launch-webinar-registration/

Date & Time:
October 1st, 2024 @ 10:00 – 10:30 AM EDT

Speaker(s):
R. Jason Cronk
With over two decades of experience in principle and trust consultancy, Jason Cronk is a seasoned privacy engineer, developer, author of the IAPP textbook “Strategic Privacy by Design,” Privacy Engineering Section Leader at the IAPP, and founder and president of the Institute of Operational Privacy Design. His knowledge and involvement reaches across the spectrum as an active member of the academic, engineering, legal and professional privacy communities and a pioneering voice in the development of privacy by design.

Semi-Annual Privacy Wiki Review
2024-10-03 13:00 - 14:00 | https://iopd.whereby.com/privacy-wiki
UPCOMING: New Semi-Annual Privacy Wiki Review October 3rd, 2024 @ 1PM ET at https://iopd.whereby.com/privacy-wiki! Our Chief Editors will introduce themselves, welcome new volunteers, announce changes, and answer questions.
Calendar invites will go out over the privacywiki@lists.privacy.wiki discussion list. Reach out to admin22@instituteofprivacydesign.org if you did not receive and need an invitation. You can manage your subscription to the privacywiki@lists.privacy.wiki anytime at http://lists.privacy.wiki/listinfo.cgi/privacywiki-privacy.wiki

U. S. Private-Sector Privacy (CIPP/US)
2024-10-14 09:00 - 2024-10-15 16:00, 2024-11-11 09:00 - 2024-11-12 16:00 | Hybrid (Online & In-Person)
U.S. Private-Sector Privacy CIPP/US provides an overview of data protection laws and regulations in the U.S and an understanding of the legal requirements for the responsible transfer of sensitive personal data to/from the U.S., the EU and other jurisdictions. The U.S. Private-Sector Privacy CIPP/US program was the first professional certification ever to be offered in information privacy. The CIPP/US credential demonstrates a strong foundation in U.S. privacy laws and regulations.
The content of the U.S. Private-Sector Privacy CIPP/US courses is integral to broadening your knowledge, educating your privacy team, and put you on the path to obtaining your privacy certifications.
Course Outline:

Module 1: Foundations of privacy and data protection
Module 2: Comprehensive privacy data protection laws
Module 3: U.S. legal framework
Module 4: Enforcement of U.S. privacy and security laws
Module 5: Information management from a U.S. perspective
Module 6: Government and court access to private-sector information
Module 7: State data privacy and security laws
Module 8: Telecommunications and marketing
Module 9: Health care
Module 10: Children’s privacy
Module 11: Financial privacy
Module 12: Privacy in the workplace

Class materials include:

Two full days of training
Electronic and hardcopy version of the textbook and participant guide
A 1-year IAPP membership with first class (applied to renewal for current IAPP members)
Voucher to sit for the certification exam
Voucher for a Certification Study Group*
Optional refresher course should you fail the IAPP exam **

* Certification Study Group voucher must be used within three months of taking the course.
** The IAPP exam must be taken within three months of completion of the class. Refresher course must be taken within three months of completing the IAPP exam.
*** 1 Year Membership valid with first course taken with Privacy Ref Foundation

U. S. Privacy Officer Readiness (CIPP/US + CIPM)
2024-10-14 09:00 - 2024-10-17 16:00, 2024-11-11 09:00 - 2024-11-14 16:00 | Hybrid (Online & In-Person)
U.S. Private-Sector Privacy CIPP/US provides an overview of data protection laws and regulations in the U.S and an understanding of the legal requirements for the responsible transfer of sensitive personal data to/from the U.S., the EU and other jurisdictions. The CIPP/US credential demonstrates a strong foundation in U.S. privacy laws and regulations.
Privacy Program Management teaches you how to create and manage a privacy program. It gives you the tools to answer day-to-day questions about privacy operations. When you earn a CIPM, it shows that you know how to make a privacy program work for your organization.
CIPP/US Course Outline:

Module 1: Introduction to privacy
Module 2: Structure of U.S. law
Module 3: General Data Protection Regulation overview
Module 4: The California Consumer Privacy Act
Module 5: Enforcement of U.S. privacy and security laws
Module 6: Information management from a U.S. perspective
Module 7: Federal versus state authority
Module 8: Healthcare
Module 9: Financial privacy
Module 10: Education
Module 11: Telecommunications and marketing
Module 12: Law enforcement and privacy
Module 13: National security and privacy
Module 14: Civil litigation and privacy
Module 15: Legal overview of workplace privacy
Module 16: Privacy before, during and after employment
Module 17: State data security laws
Module 18: Data breach notification laws

CIPM Course Outline:

Module 1: Introduction to privacy program management
Module 2: Privacy Governance
Module 3: Applicable laws and regulations
Module 4: Data assessments
Module 5: Policies
Module 6: Data subject rights
Module 7: Training and awareness
Module 8: Protecting personal information
Module 9: Data breach incident plans
Module 10: Monitoring and auditing program performance

Class materials include:

Four full days of training
Electronic and hardcopy versions of the textbook and participant guide
A 1-year IAPP membership with first class (applied to renewal for current IAPP members)
Voucher to sit for the certification exam
Voucher for a Certification Study Group*
Optional refresher course should you fail the IAPP exam **

* Certification Study Group voucher must be used within three months of taking the course.
** The IAPP exam must be taken within three months of the release of the exam. Refresher course must be taken within three months of completing the IAPP exam.
*** 1 Year Membership valid with first course taken with Privacy Ref

Privacy Program Management (CIPM)
2024-10-16 09:00 - 2024-10-17 16:00 | Hybrid (Online & In-Person)
Privacy Program Management teaches you how to create and manage a privacy program. It gives you the tools to answer day-to-day questions about privacy operations. The CIPM is the world’s first and only certification in privacy program management. When you earn a CIPM, it shows that you know how to make a privacy program work for your organization.
The content of the courses is integral to broadening your knowledge, educating your privacy team, and put you on the path to obtaining your privacy certifications.
Course outline:

Module 1: Introduction to privacy program management
Module 2: Privacy Governance
Module 3: Applicable laws and regulations
Module 4: Data assessments
Module 5: Policies
Module 6: Data subject rights
Module 7: Training and awareness
Module 8: Protecting personal information
Module 9: Data breach incident plans
Module 10: Monitoring and auditing program performance

Class materials include:

Two full days of training
Electronic and hardcopy version of the textbook and participant guide
A 1-year IAPP membership with first class (applied to renewal for current IAPP members)
Voucher to sit for the certification exam
Voucher for a Certification Study Group*
Optional refresher course should you fail the IAPP exam **

* Certification Study Group voucher must be used within three months of taking the course.
** The IAPP exam must be taken within three months of the release of the exam. Refresher course must be taken within three months of completing the IAPP exam.
*** 1 Year Membership valid with first course taken with Privacy Ref

European Data Protection (CIPP/E)
2024-10-21 09:00 - 2024-10-22 16:00 | Hybrid (Online & In-Person)
The European Data Protection (CIPP/E) encompasses pan-European and national data protection laws, key data protection terminology and practical concepts concerning the protection of personal data and trans-border data flows. The global gold standard in European data protection certification.
The content of the courses is integral to broadening your knowledge, educating your privacy team, and put you on the path to obtaining your privacy certifications.
Course outline:

Module 1: Data protection laws
Module 2: Personal data
Module 3: Controllers and processors
Module 4: Processing personal data
Module 5: Data subject rights
Module 6: Information provision obligations
Module 7: International data transfers
Module 8: Compliance considerations
Module 9: Security of processing
Module 10: Accountability
Module 11: Supervision and enforcement

Class materials include:

Two full days of training
Electronic and hardcopy version of the textbook and participant guide
A 1-year IAPP membership with first class (applied to renewal for current IAPP members)
Voucher to sit for the certification exam
Voucher for a Certification Study Group*
Optional refresher course should you fail the IAPP exam **

* Certification Study Group voucher must be used within three months of taking the course.
** The IAPP exam must be taken within three months of completion of the class. Refresher course must be taken within three months of completing the IAPP exam.
*** 1 Year Membership valid with first course taken with Privacy Ref

Integrating Privacy Early | Privacy Engineering & Technology Education Discussion (PETed)
2024-10-24 12:00 - 13:00 | https://iopd.whereby.com/peted-discussion
Join our IOPD Privacy Engineering & Technology Education Discussion (PETed) Series! The format of the webinar will be a recorded 10-minute introduction followed by a 40-minute informal discussion and interaction with members of the IOPD. The goal will be a discussion on how to solve a specific privacy problem or privacy related resource topic and the latest implementation techniques for some of the biggest challenges like synthetic data, zero-knowledge proofs, homomorphic encryption, and translucent databases.
The participants will be asked to bring questions related to the topic. Come back the fourth Thursday of every month for a new discussion, new speaker, and new insights on the most cutting-edge privacy challenges!

Date & Time:
October 24th, 2024 @ 12:00 PM EDT / 6:00 PM CEST

Topic:
Integrating Privacy Early

Synopsis:
Ensuring that privacy is incorporated from the design stage of products (Privacy by Design) is a challenge, especially when teams are pressured to deliver products quickly. This requires privacy engineers to work closely with developers and product teams from the outset.

Lessons Learned:

Privacy is more than just the requirements posed by regulation. The very fabric of how the internet is changing due to browser’s promoting privacy. This affects aspects of engineering that need to be accounted for when designing web applications.
These changes have secondary effects to existing business processes, such as Marketing, Personalization and Measurement. Thought needs to be given to how these tools work in the context of browser privacy controls, in order to determine if they’ll meet business objectives.

Pre-Discussion Resources:

https://webkit.org/tracking-prevention/
https://learn.microsoft.com/en-us/microsoft-edge/web-platform/tracking-prevention
https://cunderwood.dev/2022/11/11/enter-third-party-cloaking-mitigation/
https://cunderwood.dev/2023/06/08/link-tracking-protection-in-ios17/
https://cunderwood.dev/2023/06/12/vendors-impacted-by-link-tracking-protection/

Speaker:
Cory Underwood
I’m a Senior Privacy Engineer for a consultancy known as Further. In my day to day, I assist clients with compliance audits and explain how the various regulatory and tech changes may impact existing business operations (particularly with marketing activities). I have a deep background in Security, Privacy and Web Development and maintain a blog https://cunderwood.dev where I discuss privacy and security changes and how businesses may need to react. Cory helps business avoid the scary and fright of not being in alignment with Privacy by Design.

Moderator:
Kimberly Lancaster
Trusted Privacy Advisor who Guides Data Protection, Drives Operational Excellence, and Leads with Integrity by aligning with InfoSec, Security, GRC, Compliance, and Data Governance. Board Member, Speaker, and Author.

The IOPD Privacy Engineering & Technology Education Discussion (PETed) Series is a members-only event. Join as an Ambassador before the 1st of each month to get invited to this month’s event! Please reach out to a current member to be invited as a guest. If you are already a member, subscribe to our PETed Mailing List for announcements and monthly invitations!

Purpose and Means CIPM Live Training - Nov 5, 6, 12 & 13
2024-11-05 - 2024-11-13 | Virtual

Q4 All Hands Meeting 2024
2024-11-06 15:00 - 16:00 | https://iopd.whereby.com/all-hands
ALL HANDS MEETING 📢 Ambassadors, Advisors, Volunteers, and Committee Members are all invited to join us Wednesday, November 6th from 3:00 – 4:00 PM ET. We will meet to welcome our new members, give updates on current projects, and report on the Design Assurance Standard V. 1.0 slated for publishing in 2025!
Please reach out to admin22@instituteofprivacydesign.org if you have yet to receive an invitation. Guest invites are first come first serve. If you have a friend or colleague interested, send us their email and we’ll add them to the guest list!
