Test Prep Course for Certified Information Privacy Professional Exam [EU GDPR, US, Canada and Asia] by LawSikho: Fee, Duration, How to Apply

Quick facts

particular	details
Medium of instructions English	Mode of learning Self study, Virtual Classroom	Mode of Delivery Video and Text Based	Frequency of Classes Weekdays, Weekends	Learning efforts 6-8 Hours Per Week

Course overview

The duration of the Test Prep Course for Certified Information Privacy Professional Exam [EU GDPR, US, Canada and Asia] certification is 8 months. The certification course focuses on providing practical data protection expertise to privacy professionals and preparing them for the Certified Information Privacy Professional (CIPP) Exam.

The certification course offers real-world case studies of privacy breaches for participants to gain a deeper understanding. The Test Prep Course for Certified Information Privacy Professional Exam [EU GDPR, US, Canada and Asia] certification by LawSikho provides complete guidance to the aspirants for the CIPP exam by giving mock tests, practice scenarios, and exam techniques.

Also Read: Online Data Protection Courses & Certifications

The highlights

8 Months Online Course
6-8 Hours Class Per Week
100% Money-Back Guarantee
24/7 Online Access to Study Material
2 Practical Exercises Every Week
Classes on Sundays/After 8 PM on Weekdays

Program offerings

Live doubt clearing
& live classes
Professional networking
Interview preparation guidance
Top students recommendations
Law firms and companies
Internship
Placement support
Instructor feedback on assignments
Writing training

Course and certificate fees

Fees information

₹ 51,000

Test Prep Course for Certified Information Privacy Professional Exam [EU GDPR, US, Canada and Asia] Certification Fee Structure

Certification Course	Fees
Test Prep Course for Certified Information Privacy Professional Exam [EU GDPR, US, Canada and Asia]	Rs 51,000

certificate availability

Yes

certificate providing authority

National Skill Development Corporation

Eligibility criteria

Certification Qualifying Details

Upon completion of the Test Prep Course for Certified Information Privacy Professional Exam [EU GDPR, US, Canada and Asia] online certification, the participants will receive a certificate from Cobranded by NSDC and Skill India. Students need to complete all the assignments to receive the certificate

What you will learn

After completing the Test Prep Course for the Certified Information Privacy Professional Exam [EU GDPR, US, Canada and Asia] certification syllabus, the students will learn the EU GDPR data protection regulations. They will also gain a deep understanding of EU GDPR principles, needs and implementations of business operations.

The students will explore how data flows across borders complying with privacy laws and the multifaceted privacy landscape in the US. Upon the completion of the Test Prep Course for Certified Information Privacy Professional Exam [EU GDPR, US, Canada and Asia] training, they will be able to analyse the case studies and gain knowledge of the Canadian privacy regime.

Who it is for

Lawyer Data analyst Compliance manager Software engineer Data engineer

The Test Prep Course for Certified Information Privacy Professional Exam [EU GDPR, US, Canada and Asia] certification is designed for aspiring students and professionals to enhance their skills and knowledge. This course is also beneficial for:

Lawyer
Data Analyst
Data Engineer
Software Engineer
Compliance Manager

Admission details

To join the Test Prep Course for Certified Information Privacy Professional Exam [EU GDPR, US, Canada and Asia] classes, follow the steps mentioned below:

Step 1: Browse the link mentioned below:

https://lawsikho.com/course/test-prep-course-for-certified-information-privacy-professional-exam-cipp-eu-gdpr-us-ccpa-cpra-canada

Step 2: Participants can click on the “Enroll Now” button, fill in the required details and submit

The syllabus

CIPP Europe

Introduction to European Data Protection Law

Origins and Historical Context of Data Protection Law
- Rationale for data protection
- Human rights laws
- Early laws and regulations
- The need for a harmonized European approach
- The Treaty of Lisbon
- A modernized framework
- EU Member Nations
European Union Institutions
- Council of Europe
- European Court of Human Rights
- European Parliament
- European Commission
- European Council
- Court of Justice of the European Union
Legislative Framework
- The Council of Europe Convention for the Protection of Individuals with Regard to the Automatic Processing of Personal Data of 1981 (The CoE Convention)
- The EU Data Protection Directive (95/46/EC)
- The EU Directive on Privacy and Electronic Communications (2002/58/EC) (ePrivacy Directive) – as amended
- The EU Directive on Electronic Commerce (2000/31/EC)
- European data retention regimes
- The General Data Protection Regulation (GDPR) (EU) 2016/679 and related legislation
- Data Protection Acts of the Member States
European Data Protection Law and Regulation
- Data Protection Concepts
  - Personal data
  - Sensitive personal data
  - Pseudonymous and anonymous data
  - Processing
  - Cross-border processing
  - Controller
  - Processor
  - Data subject
- Territorial and Material Scope of the General Data Protection Regulation
  - Establishment in the EU
  - Non-establishment in the EU
- Data Processing Principles
  - Fairness and lawfulness
  - Purpose limitation
  - Proportionality
  - Accuracy
  - Storage limitation (retention)
  - Integrity and confidentiality
- Lawful Processing Criteria
  - Consent
  - Contractual necessity
  - Legal obligation, vital interests, and public interest
  - Legitimate interests
  - Special categories of processing
- Information Provision Obligations
  - Transparency principle
  - Privacy notices
  - Layered notices
- Data Subjects Rights
  - Access
  - Rectification
  - Erasure and the right to be forgotten (RTBF)
  - Restriction and objection
  - Consent, including the right of withdrawal
  - Automated decision-making, including profiling
  - Data portability
  - Restrictions
- Security of Personal Data
  - Appropriate technical and organizational measures
    - a.Protection mechanisms (encryption, access controls, etc.)
  - Breach notification
    - a. Risk reporting requirements
  - Vendor Management
  - Data sharing
- Accountability Requirements
  - Responsibility of controllers and processors
    - a. joint controllers
  - Data protection by design and by default
  - Documentation and cooperation with regulators
  - Data Protection Impact Assessment (DPIA)
    - a. established criteria for conducting
  - Mandatory data protection officers
  - Auditing of privacy programs
  - International Data Transfers
    - Rationale for prohibition
    - Adequate jurisdictions
    - Safe Harbor and Privacy Shield
    - Standard Contractual Clauses
    - Binding Corporate Rules (BCRs)
    - Codes of Conduct and Certifications
    - Derogations
    - Transfer impact assessments (TIAs)
  - Supervision and enforcement
    - Supervisory authorities and their powers
    - The European Data Protection Board
    - Role of the European Data Protection Supervisor (EDPS)

CIPP Canada

Canadian Privacy Fundamentals

Legal Basics
- The Canadian government and legal system
  - Political structure
  - Division of powers
  - Role of courts and administrative tribunals
- Canadian laws and their interpretation
  - Civil versus common law
  - Sources of law
  - Scope and application of law
  - Relationship to other laws
  - Enforcement
- Enforcement agencies and powers
  - Canada
    - Privacy commissioners
      - Office of the Federal Privacy Commissioner
      - Provincial and territorial privacy commissioners
    - Courts and remedies
      - Federal Court of Canada
      - Provincial courts
Privacy Basics
- Understand that definitions of personal information vary among Canadian jurisdictions and legislation
- Types of personal information
  - Employee and work-related information
  - Public records
  - Publicly available information
    - Office of the Privacy Commissioner of Canada, Interpretation Bulletin, Publicly available information
    - Provincial legislation
- Private/sensitive information
- Safeguarding personal information
- General concepts of fair information practice
  - Notice
  - Consent (Opt out vs. Opt in)
  - Access controls and accountability
Privacy Principles
- Canadian Standards Association (CSA)
  - Model Code for the Protection of Personal Information (CAN/CSA-Q830-96)
  - CSA Principles in Canadian Privacy Law
Model codes and cooperation
- Organisation for Economic Co-operation and Development (OECD); American Institute of Certified Public Accountants/Canadian Institute of Chartered Accountants (AICPA/CICA); Generally Accepted Privacy Principles (GAPP)

Canadian Privacy Laws and Practices—Private Sector

Statutes
- Understand when to apply The Personal Information Protection and Electronic Documents Act of Canada (PIPEDA)
- Understand when to apply the private sector privacy legislation in BC, Alberta and Quebec
- Understand when to apply Canada’s Anti-Spam Legislation (CASL)
Key Concepts and Practices
- Accountability
  - Under the Quebec Act
  - Other Canadian statutes
Openness
Collection, use and disclosure
- Commercial activity as it relates to PIPEDA
- Business transactions
Enhanced and valid consent
- Reasonableness
  - Opt-out consent mechanisms, their use and limitations
  - Consent to new purposes
  - Installation of computer programs
  - Automatic downloads
  - Documentation
Notice requirements
Data breach reporting
- Record keeping
- PIPEDA
- Understand when to apply privacy legislation regarding data breach reporting (e.g., Ontario’s Personal Health Information Protection Act (PHIPA), Alberta’s Personal Information Protection Act (PIPA), New Brunswick’s Personal Health Information Privacy and Access Act (PHIPAA))
Managing privacy protection requirements of third parties (e.g. service providers)
Access
- Rights and obligations
Compliance trends
- Commissioner rulings (e.g., agreements, guidance and published positions, appealed decisions, expectations)
- Relevant Canadian court rulings
Compliance issues

Canadian Privacy Laws and Practices—Public Sector

Statutes
- Understand when to apply the Privacy Act of Canada
- Understand when to apply the Freedom of Information and Protection of Privacy Acts of the different provinces and territories
Key Concepts
- Consent
  - Authority to collect
  - Consistent use
Disclosure and transfer
Retention
Openness and access
Privacy implications of service delivery models
- E-Government initiatives
Sub-Contracting and Shared Services
Research and Statistical Use of Personal Information

Canadian Privacy Laws and Practices—Health Sector

Statutes
- Understand when to apply the various Health Information Acts of the provinces and territories
Application and scope
- Personal health information
  - Definitions
  - Interaction with PIPEDA
  - Substantially similar to PIPEDA
- The health information custodians and trustees
  - Custodians working for non-custodians
  - When non-custodians receive personal health information from custodians
  - Agents
Key concepts and issues
- Consent and exceptions to consent
- Authorized purposes
- Disclosures to non-custodians
- Safeguarding and breach notification
  - 1. Agents
  - 2. Notice of loss
- Integrity
- Accountability and openness
- Access and right to correct information
- Oversight
- Surveillance
Health Sector Information
- Organisations
  - eHealth Ontario
  - Canadian Organisation for the Advancement of Computers in Health (COACH)
  - Canadian Institute for Health Information (CIHI)
Genetic testing
- Canadian Life and Health Insurance Association Inc. (CLHIA)
- PIPEDA and OPC rulings
- The Genetic Non-Discrimination Act

CIPP US

Introduction to the U.S. Privacy Environment

Structure of U.S. Law
- Branches of government
- Sources of law
  - Constitution
  - Legislation
  - Regulations and rules
  - Case law
  - Common law
  - Contract law
- Legal definitions
  - Jurisdiction
  - Person
  - Preemption
  - Private right of action
- Regulatory authorities
  - Federal Trade Commission (FTC)
  - Federal Communications Commission (FCC)
  - Department of Commerce (DoC)
  - Department of Health and Human Services (HHS)
  - Banking regulators
    - 1. Federal Reserve Board
    - 2. Comptroller of the Currency
  - State attorneys general
  - Self-regulatory programs and trust marks
- Understanding laws
  - Scope and application
  - Analyzing a law
  - Determining jurisdiction
  - Preemption
Enforcement of U.S. Privacy and Security Laws
- Criminal versus civil liability
- General theories of legal liability
  - Contract
  - Tort
  - Civil enforcement
- Negligence
- Unfair and deceptive trade practices (UDTP)
- Federal enforcement actions
- State enforcement (Attorneys General (AGs), etc.)
- Cross-border enforcement issues (Global Privacy Enforcement Network (GPEN)) - Self-regulatory enforcement (PCI, Trust Marks)
Information Management from a U.S. Perspective
- Data sharing and transfers
  - Data inventory
  - Data classification
  - Data flow mapping
- Privacy program development
- Managing User Preferences
- Incident response programs
  - Cyber threats (e.g., ransomware)
- Workforce Training
- Accountability
- Data retention and disposal (FACTA)
- Online Privacy
- Privacy notices
- Vendor management
  - Vendor incidents
  - Cloud issues
International data transfers
- U.S. Safe Harbor and Privacy Shield
- Binding Corporate Rules (BCRs)
- Standard Contractual Clauses
- Other approved transfer mechanisms
Other key considerations for U.S - based global multinational companies
- GDPR requirements
- APEC privacy framework
Resolving multinational compliance conflicts
- EU data protection versus e-discovery

Limits on Private-sector Collection and Use of Data

Cross-sector FTC Privacy Protection
- The Federal Trade Commission Act
- FTC Privacy Enforcement Actions
- FTC Security Enforcement Actions
- The Children’s Online Privacy Protection Act of 1998 (COPPA)
- Future of federal enforcement (Data brokers, Big Data, IoT, AI, unregulated data)
Medical
- The Health Insurance Portability and Accountability Act of 1996 (HIPAA)
  - HIPAA privacy rule
  - HIPAA security rule
- Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009
- The 21st Century Cures Act of 2016
- Confidentiality of Substance Use Disorder Patient Records Rule
  - 42 CFR Part 2
Financial
- The Fair Credit Reporting Act of 1970 (FCRA)
- The Fair and Accurate Credit Transactions Act of 2003 (FACTA)
- The Financial Services Modernization Act of 1999 (“Gramm-Leach-Bliley” or GLBA)
  - GLBA privacy rule
  - GLBA safeguards rule
- Red Flags Rule
- Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010
- Consumer Financial Protection Bureau
- Online Banking
Education
- Family Educational Rights and Privacy Act of 1974 (FERPA)
- Education technology
Telecommunications and Marketing
- Telemarketing sales rule (TSR) and the Telephone Consumer Protection Act of 1991 (TCPA) i. The Do-Not-Call Registry (DNC)
- Combating the Assault of Non-solicited Pornography and Marketing Act of 2003 (CAN-SPAM)
- The Junk Fax Prevention Act of 2005 (JFPA)
- The Wireless Domain Registry
- Telecommunications Act of 1996 and Customer Proprietary Network Information
- Cable Communications Privacy Act of 1984
- Video Privacy Protection Act of 1988 (VPPA)
  - Video Privacy Protection Act Amendments Act of 2012 (H.R. 6671)
- Digital advertising

Government and Court Access to Private-sector Information

Law Enforcement and Privacy
- Access to financial data
  - Right to Financial Privacy Act of 1978
  - Bank Secrecy Act of 1970 (BSA)
- Access to communications
  - Wiretaps
  - Electronic Communications Privacy Act (ECPA)
    - E-mails
    - Stored records
    - Pen registers
- The Communications Assistance to Law Enforcement Act (CALEA)
National Security and Privacy
- Foreign Intelligence Surveillance Act of 1978 (FISA)
  - Wiretaps
  - E-mails and stored records
  - National security letters
- Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001 (USA-Patriot Act)
- The USA Freedom Act of 2015
- The Cybersecurity Information Sharing Act of 2015 (CISA)
Civil Litigation and Privacy
- Compelled disclosure of media information
  - Privacy Protection Act of 1980
- Electronic discovery

Workplace Privacy

Introduction to Workplace Privacy
- Workplace privacy concepts
  - Human resources management
- U.S. agencies regulating workplace privacy issues
  - Federal Trade Commission (FTC)
  - Department of Labor
  - Equal Employment Opportunity Commission (EEOC)
  - National Labor Relations Board (NLRB)
  - Occupational Safety and Health Act (OSHA)
  - Securities and Exchange Commission (SEC)
U.S. Anti-discrimination laws
- Civil Rights Act of 1964
- Americans with Disabilities Act (ADA)
- Genetic Information Nondiscrimination Act (GINA)
Privacy before, during and after employment
- Employee background screening
  - Requirements under FCRA
  - Methods
    - 1. Personality and psychological evaluations
    - 2. Polygraph testing
    - 3. Drug and alcohol testing
    - 4. Social media
- Employee Monitoring
  - Technologies
    - 1. Computer usage (including social media)
    - 2. Biometrics
    - 3. Location-based services (LBS)
    - 4. Wellness Programs
    - 5. Mobile computing
    - 6. E-mail and postal mail
    - 7. Photography
    - 8. Telephony
    - 9. Video
  - Requirements under the Electronic Communications Privacy Act of 1986 (ECPA)
  - Unionized worker issues concerning monitoring in the U.S. workplace
- Investigation of employee misconduct
  - Data handling in misconduct investigations
  - Use of third parties in investigations
  - Documenting performance problems
  - Balancing rights of multiple individuals in a single situation
- Termination of the employment relationship
  - Transition management
  - Records retention
  - References

State Privacy Laws

Federal vs. state authority
Marketing laws
Financial Data
- Credit history
- California SB-1
Data Security Laws
- SSN
- Data Destruction
- Security procedures
- Recent developments
  - California Electronic Communications Privacy Act (2015)
  - Delaware Online Privacy and Protection Act (2016)
  - Nevada SB 538 (2017)
  - Illinois Right to Know Act (2017)
  - New Jersey Personal Information and Privacy Protection Act (2017)
  - Washington Biometric Privacy Law (H.B. 1493) (2017)
  - NYDFS Cybersecurity Regulation (2017)
  - California Consumer Privacy Act (CCPA) (2018)
  - Other significant state acts and laws
Data Breach Notification Laws
- Elements of state data breach notification laws
  - Definitions of relevant terms (personal information, security breach)
  - Conditions for notification (who, when, how)
  - Subject rights (credit monitoring, private right of action)
- Key differences among states today
- Recent developments
  - Tennessee SB 2005
  - Illinois HB 1260
  - California AB 2828
  - New Mexico HB 15
  - Massachusetts HB 4806
  - Other significant state amendment

How it helps

The Test Prep Course for Certified Information Privacy Professional Exam [EU GDPR, US, Canada and Asia] certification benefits include:

Participants will receive one online live class per week and will have to complete two practical assignments.
Students will have digital access to all class recordings and assignments using LMS, Android, and iOS apps.
Candidates will get to learn how to write and publish articles and will have the opportunity to connect with classmates and alumni.
Students will have access to updated content online for three years.
The certification course will include instructor feedback on assignments.
The participants will get an opportunity to ask questions and clear their doubts on WhatsApp, LMS and classes.

FAQs

What is the duration of the Test Prep Course for Certified Information Privacy Professional Exam [EU GDPR, US, Canada and Asia] training?

The duration of the course is 8 months, which is 6 to 8 hours of classes per week. The course aims to prepare the aspirants for the Certified Information Privacy Professional (CIPP) Exam.

What are the facilities available for the Test Prep Course for Certified Information Privacy Professional Exam [EU GDPR, US, Canada and Asia] certification?

The course offers various facilities such as robust curriculum, placement support, internship support, live online classes, class recordings, and a co-branded certificate from NSDC and Skill India.

Who can apply for the Test Prep Course for Certified Information Privacy Professional Exam [EU GDPR, US, Canada and Asia] certification?

Privacy Enthusiasts, Legal Professionals, Data Handlers, Business Owners, IT Professionals, Compliance Officers, and Risk Managers can apply for this course.

What are the career options after pursuing the Test Prep Course for Certified Information Privacy Professional Exam [EU GDPR, US, Canada and Asia] online certification?

After completing the certification course, students can apply for positions such as Privacy Managers, Compliance Managers, Privacy Counsels, Privacy Analysts, Data Privacy Consultants, Privacy Specialists, and Data Privacy Advisors.

Will the students get their money back if they do not like the Test Prep Course for Certified Information Privacy Professional Exam [EU GDPR, US, Canada and Asia] certification?

If students do not find the course valuable or understandable, or for any other reason, they can ask for a refund but they must diligently follow the course, attend all classes, and complete all exercises. If they still do not find the course satisfactory, the entire course fee will be refunded.