Curso LGPD in action 2.0

The wait is over! After a few months and many requests, we are back with Centro DTIBR's traditional Privacy and Personal Data Protection Course! This will be the last edition of the course in 2021!

Our focus is on analyzing the main aspects of a compliance process under the General Data Protection Law - LGPD (Brazil's Lei Geral de Proteção de Dados), with an emphasis on the practical, multidisciplinary application of knowledge, which is part of our DNA.

The Course comprises 11 classes and 01 workshop. Each module can be taken individually or together with others, as the participant prefers. Purchasing the promotional tier/bundle gives access to all course activities at a discount of more than 30%, as part of our inclusion strategy.

Meticulously planned, to Centro DTIBR's quality standard. Our focus is on quality, not quantity. Average satisfaction rate among former students above 90%. Emphasis on the practical side of each topic, covering real situations illustrated by concrete cases. Highly qualified multidisciplinary faculty with solid experience, working in both the public and private sectors. Ongoing support from teaching assistants, with a distinctive method and plenty of supplementary reading material. Centro DTIBR's commitment to inclusive pricing, especially through the promotional tier/bundle.

Students, professionals and researchers from any background or field, in the public or private sector, who already work or intend to work hands-on with personal data protection. Since the course will study this topic in depth, those who have no prior experience in the subject should take Module 1, which introduces the concepts and brings everyone up to the same level.

The course comprises the modules listed below. Classes will be live, on Mondays, Wednesdays and Fridays, from 7:00 pm to 9:50 pm (Brasília time).

Workload

36 class hours.

Dates

September 1, 3, 8, 10, 13, 15, 17, 20, 22, 24, 27 and 29, 2021.

Venue

Zoom Meetings platform.

1. Module 1 - Introduction to personal data protection and leveling

   September 1 - Prof. Leonardo Parentoni

   Module intended for those who have not yet studied the LGPD or who know little about the subject. It aims to bring course participants to the same level so that they can properly follow the subsequent modules, which require knowledge of the topic, as they are specifically designed to go deeper into each subject and apply it in practice, analyzing concrete Brazilian and foreign cases.

2. Module 2 - Parties involved in personal data processing

   September 3 - Prof. Bruno Vieira

   Clarifying the concepts of data subject, controller, processor and data protection officer, based on concrete cases, the LGPD, statements by the Brazilian regulator (ANPD, Brazil's National Data Protection Authority) and foreign legislation, especially the European Regulation (GDPR). Civil liability regime for processing agents and the data protection officer, focusing on the burden of proof, right of recourse, exclusions from civil liability and collective redress.

3. Module 3 - Theory and practice of legal bases

   September 8 - Prof. Leonardo Parentoni

   Rationale common to the legal bases; absence of hierarchy. Accountability. Consent of the data subject. Compliance with a legal or regulatory obligation. Studies carried out by a research body. Performance of a contract or preliminary procedures. Regular exercise of rights in proceedings. Protection of life or physical safety and protection of health (vital interests). Legitimate interest of the controller or third parties.

4. Module 4 - Data subject rights

   September 10 - Prof. Fabrício da Mota Alves

   Rationale common to the exercise of all data subject rights. Individual and collective protection. Deceased persons. Legal entities. Entities without legal personality. End of processing and applicable measures. Rights to confirmation, access and correction. Rights related to data sharing. Consent, refusal to consent and withdrawal of consent. Anonymization, blocking or deletion. Right to portability. Review of automated decisions. Procedure for exercising these rights, deadlines and forms of response.

5. Module 5 - Scope of the LGPD

   September 13 - Prof. Leonardo Parentoni

   Foundations of the LGPD: protection of the data subject and preservation of economic activities. Territorial scope and extraterritoriality. Material scope. Subjective scope. Small businesses and pre-existing databases. Non-profit institutions. Role of the ANPD.

6. Module 6 - Data processing by public authorities and the National Data Protection Authority (ANPD)

   September 15 - Prof. Leonardo Parentoni

   Particularities of data processing by public authorities. National Data Protection Authority (ANPD): function, importance, powers, legislative process, regulatory and sanctioning activity. Current stage of the ANPD and its regulatory agenda. Inter-institutional cooperation by the ANPD and possible conflicts of jurisdiction.

7. Module 7 - Platforms supporting data protection compliance programs

   September 17 - Prof. Sidney Rocha

   What are platforms supporting personal data protection programs and what are they for? Which stages of the compliance process do they apply to? How? Advantages and disadvantages of using these platforms. Average cost. Screen-by-screen demonstration of how to use one of the best known in practice. Is it possible to run a good LGPD compliance project without using platforms?

8. Module 8 - Risk management in personal data processing

   September 20 - Prof. Remi Yun

   Basic technical notions: threats, vulnerabilities and types of risk (operational, financial, strategic, compliance and reputational). Introduction to risk assessment methodologies: SWOT, 5W2H, 5 Whys, COSO ERM. Inherent risk and residual risk. Risk appetite and risk tolerance. How to define the appropriate level of risk for each business model. Essential stages of a risk management program. Risk management and the Data Protection Impact Assessment (RIPD).

9. Module 9 - Data protection, human resources and employment contracts

   September 22 - Prof. Rômulo Valentini

   Background checks: purpose and limits in labor case law. Prohibited conduct in job interviews. Main legal bases in employment contracts. Compliance with LGPD principles in employment relationships. Employee data life cycle. Technological tools commonly used in employment contracts: limits and harassment prevention. DPO duties and role deviation.

10. Module 10 - Programmatic Media, Marketing and Personal Data Protection

    September 24 - Prof. Ana Flávia Costa Ferreira

    Programmatic media: what it is, what it is for, how it works. Purchasing flow and players in the programmatic media chain. Impression buying models. Programmatic media and data flows: “cookies, first party and third party data”. Marketing under the LGPD: brief background, the most applicable principles and commonly used legal bases. Use of legitimate interest in advertising, focusing on practical cases. Consent in advertising, focusing on practical cases. Email marketing.

11. Module 11 - Information security applied to personal data protection

    September 27 - Profs. Bruno Oliveira and Yuri dos Santos

    Hashing, encryption and data anonymization. Basics of information security. Malware and common types of attack. Some information security tools: firewall, proxy, DLP, VPN, access credentials, etc. Information security in the LGPD: principle, duty of processing agents, control tools, mitigating factor for sanctions. Security incidents: prevention measures and response flow, optional and mandatory notifications.

12. Workshop - Mapping processes involving personal data (data mapping)

    September 29 - Profs. Laiane Fantini and Yuri dos Santos

    What is the mapping of processes involving personal data? What is it for? What are the main difficulties in practice? Mapping techniques (according to the size of the institution and the business model). Common pitfalls and mistakes. Tools for automating the mapping phase. A summary mapping exercise carried out by the students themselves (hands-on), based on a hypothetical case prepared by the DTIBR Team.

• 

  Leonardo Parentoni (opens in a new tab)

  Centro DTIBR

  Founder and Scientific Coordinator of Centro DTIBR. 20 years of experience in the public and private sectors. PhD in Law from USP (University of São Paulo). Master's in Business Law from UFMG (Federal University of Minas Gerais). Associate Professor of Business Law at UFMG and Full Professor at IBMEC/MG. Founder and Coordinator of the Law, Technology and Innovation concentration area in the Graduate Program of the UFMG Law School. Visiting Researcher at the University of Texas at Austin/USA and at Uruguay's Data Protection Agency. Strategic technology partner (KTP Program) at the University of Technology Sydney. Team Mentor in the Law Without Walls – LWOW/USA program. Publications freely available on ResearchGate (opens in a new tab).

• 

  Fabrício da Mota Alves

  Specialist in Digital Law. Partner at the law firm Serur Advogados. Representative of the Federal Senate on Brazil's National Council for Personal Data Protection and Privacy. Provides legal and legislative advice to the Federal Senate.

• 

  Remi Yun

  Head of privacy and data protection at Suzano S/A. Lawyer specializing in risk management and compliance. Tutor of the Cyber Fraud Track at the Behavioral Risk Research Institute. Certified by EXIN in ISO-IEC 27001 and Privacy and Data Protection Essentials. Founder of LGPD Acadêmico. Has completed project management courses at Ohio University/USA.

• 

  Ana Flávia Costa Ferreira

  Lawyer with a law degree from UFMG, including an academic exchange at Johannes Gutenberg-Universität Mainz, Germany. Postgraduate degree in Intellectual Property and New Business from FGV-Law. Specialized practice in Digital Media, Advertising and Entertainment. Holds the IAB Brasil Digital Fundamentals Certification.

• 

  Bruno Alberto Soares Oliveira (opens in a new tab)

  Centro DTIBR

  Computer Engineer. PhD candidate and Master's in Electrical Engineering at UFMG, in the Computational Intelligence research line. Works as an intelligent systems developer at SVA Tech - Soluções em Vídeo Analítico. Member of the Machine Intelligence and Data Science (MINDS) Laboratory for research in Artificial Intelligence. Head of IT at the Center for Research in Law, Technology and Innovation (DTIBR). Researcher in Machine Learning Algorithms, Data Science, Computer Vision and Digital Image Processing.

• 

  Rômulo Valentini (opens in a new tab)

  Centro DTIBR

  PhD in Law from UFMG. Guest Professor in the Graduate Program in Law at the Federal University of Minas Gerais. Member of the Board of the Center for Research in Law, Technology and Innovation - DTI BR. Professor in the Graduate Program in Law and Technology at Faculdade Arnaldo. Professor in the MBA in Digital Compliance at PUC/MG. Professor of Labor Law at FPL/MG. Judicial Analyst at the TRT (Regional Labor Court) of the 3rd Region. Member of the PJe GNN at the CSJT (Superior Council of Labor Justice) in 2017.

• 

  Bruno Fernandes Vieira

  Centro DTIBR

  Master's in Law from UFMG. PhD candidate in European and International Private Law at Maastricht University. Lawyer. Associate researcher at Utrecht University and Sutherland Doctoral Fellow at University College Dublin. Member of the Maastricht European Private Law Institute (M-EPLI), the Competition Law Committee of OAB/MG (Minas Gerais Bar Association) and the Consumer Protection Committee of OAB/MG.

• 

  Laiane Caetano Fantini

  Centro DTIBR

  Master's student in Private Law (PUC Minas/CAPES). Postgraduate degree in Business Law (PUC Minas). Member of the Startup Law Committee of OAB/MG. Lawyer specializing in Video Game Law. Works in advisory, risk prevention and risk containment for medium-sized and large companies.

• 

  Sidney Cássio Alves Rocha

  Lawyer. Director of the consulting firm Trinité, where he works on information security and personal data protection compliance projects. PhD candidate and Master's in Law from PUC/MG. Degrees in Law and in Electrical Engineering from PUC/MG. Holds numerous certifications in data protection, such as: DPO by EXIN, CDPSE by ISACA, Fellow of Privacy Technology by One Trust, ISO-IEC 27001 lead auditor, Azure Administrator by Microsoft.

• 

  Yuri Alexandre dos Santos (opens in a new tab)

  Centro DTIBR

  Lawyer. President of Centro DTIBR. Law degree from UFMG, including an academic exchange at the University of Ljubljana (Univerza v Ljubljani), Slovenia. Master's student in Computer Science at UFMG. Works with social computing, machine learning and data science. Works in advisory, risk prevention and risk containment for medium-sized and large companies.

Each activity will be taught live and online, with a focus on the practical, multidisciplinary application of the topics. Our method is highly praised. Learn more about it by clicking here.

A certificate will be issued by Centro DTIBR. If one or more modules are purchased individually, an individual certificate will be issued for each module actually attended. If the full course is purchased (promotional tier/bundle), a single certificate will be issued to students who attend at least 07 modules (equivalent to approximately 60% of the course). The certificate will bear the name provided on the Sympla platform at registration, and no later corrections will be accepted. Therefore, before registering, set up your name on the Sympla platform exactly as you would like it to appear on the certificate. Certificates will be sent within 30 (thirty) days after the last module of the course.