Privacy and Confidentiality

By the end

What you'll build

• Identify personal data, special category data and confidential business information in the material you handle
• Apply purpose limitation and data minimisation to a real request for information
• Recognise a data subject rights request or a confidentiality question and route it correctly rather than answering alone
• Respect contractual confidentiality obligations, including those that continue after a project or engagement ends
• Judge when a new use of existing data needs a review before it goes ahead
• Take the right first steps when personal data has gone to the wrong recipient

Curriculum

What's inside

7 modules · 41 lessons

1. 01

   What Counts as Personal and Confidential

   6 lessons
   • Personal Data, Special Categories and Confidential Business Information
   • Identifiers, Pseudonyms and Indirect Identification
   • Employee and Candidate Data Is Personal Data Too
   • Confidentiality From Contract Versus Confidentiality From Law
   • Where Privacy and Security Overlap, and Where They Do Not
   • + 1 more lesson
2. 02

   Principles You Can Actually Apply

   6 lessons
   • Purpose Limitation and Minimisation Applied to a Real Request
   • Lawful Basis in Plain Language
   • Accuracy, Retention and the Cost of Keeping Data
   • Transparency: What People Were Told We Would Do
   • Accountability: Showing Your Reasoning, Not Just Your Result
   • + 1 more lesson
3. 03

   Everyday Privacy Decisions

   6 lessons
   • Ten Requests You Will Receive and How to Answer Them
   • Need to Know Applied Between Internal Teams
   • Using Live Data for Testing, Demonstrations or Model Training
   • Recording Meetings, Monitoring and Giving Notice
   • Photographs, Case Studies and Marketing Permissions
   • + 1 more lesson
4. 04

   Rights, Requests and Complaints

   6 lessons
   • Recognising a Rights Request Inside an Ordinary Message
   • The Main Rights and What They Ask of Us
   • Verifying Identity Before You Disclose Anything
   • Escalation and Why You Should Not Answer Alone
   • Complaints, Escalation Paths and When a Regulator May Become Involved
   • + 1 more lesson
5. 05

   Confidentiality and Third Parties

   6 lessons
   • Promises We Made: Confidentiality Clauses in Everyday Work
   • Customer Confidentiality Across Accounts and Teams
   • Suppliers, Processors and Onward Sharing
   • Cross-Border Transfers and Why They Need a Basis
   • Obligations That Continue After a Project or Engagement Ends
   • + 1 more lesson
6. 06

   When Privacy Goes Wrong

   6 lessons
   • The Misdirected Email and the First Hour of a Personal Data Breach
   • Telling a Personal Data Breach From a Security Event
   • Reporting Internally and Who Decides on Notification
   • Containment Without Making the Situation Worse
   • Registers, Records and Lessons Learned
   • + 1 more lesson
7. 07

   Practice and check

   5 lessons
   • What the request actually ismatch pairs
   • The first hour after a misdirected emailsequence order
   • The words that decide what happens nextfill blank
   • The colleague who needs the real listscenario
   • Course quizquiz

The shape of it

How this course works