Five-day professional programmes in 14 citiesClassroom, online and in-house info@aractech.com +31 85 7444446
Global Learning for Operational Leaders
Request a Proposal info@aractech.com +31 85 7444446

Professional training course

Certified Data Protection Officer (CDPO)

Data protection is taking the world by storm. Anyone who works with personal and company sensitive data needs to understand how to ensure co... The outline covers Introduction to Data Protection, Legal Basis & Data Subje...

  • 5 daysClassroom or online
  • 13Upcoming dates
  • 5Cities
  • €2,125Fees from
View dates & register Download PDF
Certified Data Protection Officer (CDPO)
Next online class Live virtual classroom 14 - 18 December 2026 · €1,815 + VAT Next classroom session Barcelona 14 - 18 December 2026 · €2,315 + VAT

Your week at a glance

  1. Day 1 Introduction to Data Protection
  2. Day 2 Legal Basis & Data Subjects
  3. Day 3 Data Breaches and Complaints & Security
  4. Day 4 The Data Protection Officer (DPO) Role & Cross border transfers
  5. Day 5 Governance

Choose your format and date

  • 5 days
  • 09:00–14:00
  • Certificate of attendance

Classroom sessions

  1. 14–18 Dec 2026

    Barcelona

    Next date
    €2,315 + VAT
    Register
  2. 18–22 Jan 2027

    Paris

    €2,810 + VAT
    Register
  3. 15–19 Feb 2027

    Frankfurt

    €2,275 + VAT
    Register
  4. 15–19 Mar 2027

    Barcelona

    €2,315 + VAT
    Register
  5. 19–23 Apr 2027

    Frankfurt

    €2,275 + VAT
    Register
  6. 17–21 May 2027

    Rome

    €2,430 + VAT
    Register
  7. 21–25 Jun 2027

    Kuala Lumpur

    Lowest fee
    €2,125 + VAT
    Register
  8. 19–23 Jul 2027

    Barcelona

    €2,315 + VAT
    Register
  9. 16–20 Aug 2027

    Paris

    €2,810 + VAT
    Register
  10. 20–24 Sep 2027

    Frankfurt

    €2,275 + VAT
    Register
  11. 18–22 Oct 2027

    Barcelona

    €2,315 + VAT
    Register
  12. 15–19 Nov 2027

    Frankfurt

    €2,275 + VAT
    Register
  13. 20–24 Dec 2027

    Rome

    €2,430 + VAT
    Register

Online / Live sessions

  1. 14–18 Dec 2026

    Live virtual classroom

    Next date
    €1,815 + VAT
    Register
  2. 18–22 Jan 2027

    Live virtual classroom

    €1,815 + VAT
    Register
  3. 15–19 Feb 2027

    Live virtual classroom

    €1,815 + VAT
    Register
  4. 15–19 Mar 2027

    Live virtual classroom

    €1,815 + VAT
    Register
  5. 19–23 Apr 2027

    Live virtual classroom

    €1,815 + VAT
    Register
  6. 17–21 May 2027

    Live virtual classroom

    €1,815 + VAT
    Register
  7. 21–25 Jun 2027

    Live virtual classroom

    €1,815 + VAT
    Register
  8. 19–23 Jul 2027

    Live virtual classroom

    €1,815 + VAT
    Register
  9. 16–20 Aug 2027

    Live virtual classroom

    €1,815 + VAT
    Register
  10. 20–24 Sep 2027

    Live virtual classroom

    €1,815 + VAT
    Register
  11. 18–22 Oct 2027

    Live virtual classroom

    €1,815 + VAT
    Register
  12. 15–19 Nov 2027

    Live virtual classroom

    €1,815 + VAT
    Register
  13. 20–24 Dec 2027

    Live virtual classroom

    €1,815 + VAT
    Register

Introduction

Course overview

Data protection is taking the world by storm. Anyone who works with personal and company sensitive data needs to understand how to ensure compliance with new data protection laws, both in the UAE, the GCC and globally.

This is a practical course that gives participants knowledge and necessary guidance to build a privacy framework within their organization. International Data Protection laws will be covered including General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and the newly launched DIFC Data Protection Law.

View full course outline

What you will achieve

Learning objectives

  • Define data protection principles and rights of data subjects
  • Determine the lawful basis for processing data
  • Demonstrate how to deal with subject access requests, data breaches and internal investigations
  • Apply appropriate transfer mechanisms for cross border transfer of personal data
  • Create and implement a privacy framework for their organization

Who should attend

Target audience

  • This course is suitable for anyone who handles sensitive personal or company data. This includes compliance officers and managers, auditors, IT managers, human resources, database professionals and any information security, incident management, and business continuity professionals whose responsibilities include the secure handling of data.
  • This course is also suitable for current Data Protection Officers who are seeking to become certified or update their knowledge with the latest laws.

Methodology

Learning approach

  • This course is highly interactive with facilitator-led presentations, group discussion and real current case studies.

Complete course outline

Five focused days of learning and application

The timings provided are estimates and may vary depending on the number of participants and the discussions taking place during the sessions. They are indicative only and do not constitute a binding commitment.

Day 1

Introduction to Data Protection

  1. General Data Protection Regulation (GDPR) and DIFC Data Protection Laws 2020
  2. Other relevant Data Protection laws
  3. Data Protection terminology
  4. Personal Data and special categories of data
  5. Coffee break
  6. Personal Data and special categories of data (continued)
  7. Data Protection principles
  8. Role of Controllers and Processors
  9. Data Processing Agreements

Day 2

Legal Basis & Data Subjects

  1. Legal Basis
  2. Lawful basis for processing Personal Data
  3. Processing special category Personal Data
  4. Conditions of consent
  5. Coffee break
  6. Understand the reliance on legitimate interests
  7. Data Subjects
  8. Privacy Notices
  9. Rights of Data Subjects
  10. Subject Access Requests (SARs)

Day 3

Data Breaches and Complaints & Security

  1. Data Breaches and Complaints
  2. Obligations of the Processor
  3. Notification to the Commissioner
  4. Notification to Data Subjects
  5. Breach procedure
  6. Remedies, liabilities and sanctions
  7. Coffee break
  8. Remedies, liabilities and sanctions (continued)
  9. Complaints and mediation
  10. Fines
  11. Security
  12. Security of data
  13. Pseudonymization
  14. Encryption

Day 4

The Data Protection Officer (DPO) Role & Cross border transfers

  1. The Data Protection Officer (DPO) Role
  2. The duties and obligations of the DPO
  3. High Risk Processing
  4. Communicating with Data Subjects
  5. Cooperating with the Commissioner
  6. Consider the Annual Risk Assessment
  7. Coffee break
  8. Consider the Annual Risk Assessment (continued)
  9. Cross border transfers
  10. Transfers outside of jurisdiction in absence of adequate protection
  11. Countries that have adequate level of protection
  12. Schrems II case
  13. Standard Contractual Clauses
  14. Binding Corporate Rules
  15. Derogations

Day 5

Governance

  1. Understand concept of accountability to demonstrate compliance
  2. How to achieve compliance
  3. Understand concept of Records of Processing Activities (RoPA)
  4. Coffee break
  5. Understand concept of Records of Processing Activities (RoPA) (continued)
  6. How to mitigate risk
  7. Monitoring compliance
  8. Understand concept of Data Protection Impact Assessments (DPIAs)

Ready to book?

Certified Data Protection Officer (CDPO)

Next session: 14 - 18 December 2026, Barcelona

Register See all dates

Course FAQs

Questions about this course

What participants and training managers usually ask before booking Certified Data Protection Officer (CDPO). Can't find your answer?

WhatsApp
What does Certified Data Protection Officer (CDPO) cover?

This course covers Data Management and Business Intelligence through a structured five-day outline focused on practical application, discussion, and implementation planning.

When is the next available session?

The next scheduled session starts on 14 - 18 December 2026. See the course schedules section for the available dates and delivery formats.

Who should attend this course?

This course is suitable for anyone who handles sensitive personal or company data. This includes compliance officers and managers, auditors, IT managers, human resources, database professionals and any information security, incident management, and business continuity professionals whose responsibilities include the secure handling of data., This course is also suitable for current Data Protection Officers who are seeking to become certified or update their knowledge with the latest laws.

Is bilingual course delivery available?

Yes. All course materials and presentations are provided in English, while bilingual explanation and discussion support may be available depending on the selected location and trainer availability. For example, when attending a course in Istanbul, you may request a Turkish-speaking trainer to explain the English course content in Turkish. Arabic explanation support may also be requested at this location. Other languages are available in selected cities. You can choose your preferred language support as an optional preference during registration.

How can I register for a session?

Use any Register button next to the available course dates to open the participant registration page and submit your booking request for the selected session.

Is this course available online as well as classroom-based?

Check the course schedules section for currently published classroom and Online / Live sessions.

Where are classroom sessions delivered?

Current classroom venues include Barcelona, Paris, Frankfurt, Rome, Kuala lumpur.

How long is the training programme?

The programme runs for five days from 09:00 to 14:00, which gives 25 contact hours, including a daily 30-minute break (22.5 hours of instruction).