Duration
1 year
Training Structure
School of Law and Political Science
Overview
The General Data Protection Regulation (GDPR) has been in effect since May 25, 2018. As a result, companies and government agencies that process personal data must engage the services of a Data Protection Officer (DPO).
The protection and management of personal data—a major challenge for companies and public entities—is a rapidly growing professional field. Since the European General Data Protection Regulation (GDPR) took effect in May 2018, many organizations have been required to appoint a DPO (Data Protection Officer), the natural successor to the data protection officer. To date, there are few long-term training programs to become a DPO—a new profession in high demand among recruiters and public and private companies seeking to comply with the GDPR and have a DPO on staff.
As a key player in GDPR compliance, the DPO must possess specific legal knowledge and expertise in data protection and security management. Acting as a true orchestrator, the DPO is responsible for providing information and advice, as well as implementing strategies to secure and protect the company’s sensitive data (such as personal data). The DPO monitors legal and regulatory developments related to digital data security. The DPO is also responsible for cooperating with the CNIL and serving as its point of contact.
This program offers a multidisciplinary approach that encompasses legal, managerial, economic, and technical dimensions.
The program runs for 7 months (from January to July), with sessions held 2.5 days per month (on average).
The Benefits of the Training Program
Program website (application and information): https://du-dpo.edu.umontpellier.fr/
Degree Office - Email
Objectives
The University Diploma (DU) in Data Protection Officer: Law & Data Security Management is a multidisciplinary, practice-oriented program covering legal, managerial, economic, and technical aspects.
It enables professionals to acquire the skills necessary for data security management in general and for serving as a DPO in particular.
The program aims to train professionals capable of developing and implementing a strategy for securing sensitive company data, with a stronger emphasis on data protection from the very design phase of systems (“Privacy by Design” and “Privacy by Default”).
Expertise and Skills
Participants who complete this training will be able to implement and oversee their company’s compliance with the GDPR. They will have a thorough understanding of national and European data protection regulations, the technical and organizational aspects of data security, and the principles and challenges of the data economy. These future DPOs will have the tools they need to establish an effective role within their organization and promote a culture of data protection and security.
Program
EU 1. Explore the challenges and issues surrounding digital transformation (cloud computing, big data, artificial intelligence, connected devices, etc.) and the technical, economic, and legal challenges of cybersecurity: what threats exist, what solutions are available, and what procedures should be followed to anticipate and manage data breaches
UE 2. Understanding and mastering data protection issues: national and European regulations; individuals’ rights and challenges related to the security of personal data; fundamental principles and scope of application of the GDPR; organization, missions, and powers of supervisory authorities, etc.
UE 3. Gain a thorough understanding of the methods and procedures related to the role of a DPO (roles, duties, and responsibilities) and master the governance tools necessary for the DPO role
UE 4. Develop skills in managing the security of sensitive data and data processing (strategies, technical, organizational, and legal security measures for the processing of personal data)
UE 5. Mastering methods and practices related to organizational compliance (GDPR and security): practical case studies on auditing and compliance with the GDPR (real-world scenarios in the local government, healthcare, banking, insurance, and retail sectors; in HR, marketing, and other departments)
UE 6. Conduct and successfully complete a Privacy Impact Assessment (PIA)
Admission
Admission Requirements
An interest in new technologies. Basic knowledge of computers and the Internet (office software) is preferred. A technical refresher program for lawyers is planned, as well as a legal refresher program for non-law professionals and students.
Target Audience
_For the initial program: Students who have completed their third year of a bachelor's degree (or equivalent).
_For continuing education: For continuing education students: a bachelor’s degree (3 years of higher education); or an associate’s degree (2 years of higher education) with one year of professional experience.
Examples of professionals for whom this university degree is relevant:
- Individuals seeking expertise in the GDPR and the protection of sensitive data
- Individuals working in government and local government who wish to serve as a DPO within their organization
- DPOs working for a public or private organization who wish to enhance their skills
- Former Data Protection Officers (CIL)
- Legal professionals (lawyers, attorneys, etc.)
- Information systems security professionals, IT specialists, and cybersecurity engineers
- Compliance and risk management professionals
- Human resources specialists
Educational requirementsfor these continuing education students: completion of the third year of a bachelor’s degree program (or equivalent); or at least two years of post-high school education plus at least two years of professional experience.
Tuition Fees
Recommended Prerequisites
No specific legal or technological skills are required to take this course. An interest in (legal, economic, and technical) issues related to data protection in general—and the protection of personal data in particular—is necessary.