Global Learning for Operational Leaders
Classroom
14 sessions
Scroll for more
Online / Live
14 sessions
Scroll for more
Introduction
Course overview
Data protection laws such as the GDPR require organisations to demonstrate accountability for how they process personal data. Audits help identify gaps before regulators or data breaches expose them.
This Aractech course covers data protection principles and accountability, audit planning, data mapping, lawful basis and consent, transparency, data subject rights, security, processors and international transfers, breach management and reporting audit results. Participants conduct a simulated data protection audit.
The course suits auditors, DPOs and privacy professionals.
What you will achieve
Learning objectives
- Understand data protection principles and accountability
- Plan data protection audits
- Review data mapping and records of processing
- Assess lawful basis, transparency and rights handling
- Evaluate security, processors and transfers
- Report findings and recommend improvements
Who should attend
Target audience
- Internal auditors
- Data protection officers
- Privacy and compliance professionals
- Information security professionals
- Legal professionals
- IT auditors
Methodology
Learning approach
- Regulatory presentations
- Simulated audit
- Document reviews
- Case studies
- Group discussions
Complete course outline
Five focused days of learning and application
The timings provided are estimates and may vary depending on the number of participants and the discussions taking place during the sessions. They are indicative only and do not constitute a binding commitment.
Day 1
Data Protection Framework
- Principles
- Accountability
- Roles
- Regulatory enforcement
- Coffee break
- Regulatory enforcement (continued)
- Audit scope
- Exercise: Accountability review
Day 2
Planning the Audit
- Risk assessment
- Audit criteria
- Records of processing
- Data mapping
- Coffee break
- Data mapping (continued)
- Interviews
- Workshop: Audit plan
Day 3
Core Compliance Areas
- Lawful basis
- Consent
- Transparency
- Data subject rights
- Coffee break
- Data subject rights (continued)
- Retention
- Exercise: Rights handling test
Day 4
Security and Third Parties
- Security measures
- Processors
- International transfers
- Breach management
- Coffee break
- Breach management (continued)
- DPIAs
- Case study: Data breach fine
Day 5
Reporting
- Findings
- Risk rating
- Recommendations
- Coffee break
- Recommendations (continued)
- Follow-up
- Continuous compliance
- Capstone: Data protection audit report
FAQ
Frequently asked questions
What does Data Protection Compliance Audit (AGRC-036) cover?
This course covers Auditing and Governance Risk and Compliance through a structured five-day outline focused on practical application, discussion, and implementation planning.
When is the next available session?
The next scheduled session starts on 2 - 6 November 2026. See the course schedules section for the available dates and delivery formats.
Who should attend this course?
Internal auditors, Data protection officers, Privacy and compliance professionals
Is bilingual course delivery available?
Yes. All course materials and presentations are provided in English, while bilingual explanation and discussion support may be available depending on the selected location and trainer availability. For example, when attending a course in Istanbul, you may request a Turkish-speaking trainer to explain the English course content in Turkish. Arabic explanation support may also be requested at this location. Other languages are available in selected cities. You can choose your preferred language support as an optional preference during registration.
How can I register for a session?
Use any Register button next to the available course dates to open the participant registration page and submit your booking request for the selected session.
Is this course available online as well as classroom-based?
Check the course schedules section for currently published classroom and Online / Live sessions.
Where are classroom sessions delivered?
Current classroom venues include Barcelona, London, Frankfurt, Rome, Kuala lumpur.
How long is the training programme?
The programme runs for five days from 09:00 to 14:00, which gives 25 contact hours, including a daily 30-minute break (22.5 hours of instruction).
Quick request
Send quick request
Send a fast enquiry about this course and the academy team will get back to you.
Get a quotation
Request a formal quotation
Choose an available date and venue, add your participants, and we will email a formal quotation for Data Protection Compliance Audit to your business address.