Curso de Atualização em Proteção de Dados Pessoais: Novidades, Perspectivas e Boas Práticas

DTIBR's open courses are back! This time, we present the first edition of our Refresher Course on Personal Data Protection.

What is new in personal data protection in Brazil? What has the National Data Protection Authority (ANPD) been doing? What is the impact of turning the ANPD into an autonomous federal agency (autarquia)? What can we expect from the ANPD and from the world of personal data protection in the coming months and years? What are the main repercussions of the LGPD (Brazil's General Data Protection Law) in the healthcare sector? And in human resources management? These are some of the questions the course will seek to answer, while also examining, in a critical and well-grounded way, the ANPD's main initiatives to date, such as resolutions, guides and technical notes. All of this, of course, with the DTIBR seal of quality.

In addition, we will offer an introductory module for students who are new to the world of personal data protection and three essential modules for those who intend to work in this field: one on data mapping and gap assessment related to data protection, another on the main documents produced in an LGPD compliance process, and the last one on the basics of information security.

The full course comprises 9 modules. You can purchase only the ones that interest you most or take the full course. The promotional tier/bundle grants access to all course activities at a significant discount. The number of bundles available is limited and favors those who register first.

See the bios of the faculty and the teaching assistants by clicking here.

Each activity will be taught live and online, with a focus on the practical, multidisciplinary application of the topics. Our method is highly praised. Learn more about this method by clicking here.

Workload

27 class hours.

Online, via the Zoom Meetings platform.

• Meticulously planned, with Centro DTIBR's quality standard;
• Focus on quality, not quantity;
• Average satisfaction rate among former students above 90%;
• Emphasis on the practical side of the topics, covering real situations illustrated through concrete cases;
• Multidisciplinary, highly qualified faculty with solid experience in both the public and private sectors, including members of the National Council for Personal Data Protection and Privacy (CNPD);
• Ongoing support from teaching assistants, with a distinctive method and plenty of supplementary reading material.

Students, professionals and researchers from any background or field, in the public or private sector, who already work or intend to work in practice with personal data protection. Since the course will study this topic in depth, those who have no prior experience in the subject should take Module 1, which introduces the concepts and brings everyone to the same level.

The course comprises the modules listed below. Classes will be online, live on the Zoom platform, on Mondays, Wednesdays and Fridays, on August 29 and 31 and September 2, 5, 9, 12, 14, 16 and 19, 2022, from 7:00 pm to 10:00 pm (Brasília time), including a 30-minute break.

1. Module 1 - Introduction to personal data protection and leveling - August 29; Prof. Leonardo Parentoni

   Module intended for those who have not yet studied the LGPD or who have little knowledge of the subject. It aims to bring participants to the same level so they can properly follow the subsequent modules, which require knowledge of the topic, as they are specifically designed to explore each subject in depth and apply it in practice, with analysis of concrete Brazilian and foreign cases.

2. Module 2 - Enforcement of the LGPD: what has happened and what is to come - August 31; Prof. Annette Martinelli de Mattos Pereira

   Legal powers and structure of the ANPD. Creation process, regulatory agenda and outlook for the ANPD's work. Monitoring the ANPD's regulatory agenda. Conflicts of jurisdiction among the different bodies that may enforce the LGPD (AGU – Office of the Attorney General, Public Prosecutor's Office, Ministry of Labor, ANPD, Judiciary, etc.). ANPD Resolution No. 1/2021: general provisions (definitions and general procedural rules), inspection process and enforcement activity. Outlook for the imposition of fines. Turning the ANPD into an autonomous federal agency: what changes in practice?

3. Module 3 - HR and personal data processing – September 2; Prof. Rômulo Valentini

   LGPD-compliant management of résumés. Legal bases for data processing in the employment relationship: consent, legitimate interest, compliance with a legal or regulatory obligation and defense of the controller's rights. Good practices in setting retention periods for data and documents generated under the employment contract. Precautions when drafting contracts with employees. Case studies.

4. Module 4 - Processing agents - September 5; Prof. José Faleiros Júnior

   Study of the ANPD guides on personal data processing agents and on the role of the data protection officer. CD/ANPD Resolution No. 2/2022: definitions, high-risk processing, obligations of small processing agents, deadlines for small processing agents. Differences between the general regime and the regime applicable to small processing agents.

5. Module 5 - Personal data processing in healthcare – September 9; Prof. José Faleiros Júnior

   The LGPD in healthcare: particularities of the processing principles, legal bases and processing agents. Criteria for retaining personal data and documents in healthcare. CFM (Federal Council of Medicine) Resolution No. 2,314/2022. Law No. 13,787/2018 (Electronic Medical Records Law). Law No. 12,682/2012 (Digitization Law). Application of the LGPD to health insurance plans. Artificial Intelligence and data protection in healthcare.

6. Module 6 - LGPD compliance in practice: identifying and assessing gaps – September 12; Prof. Laiane Fantini

   Personal data mapping: tips, good practices and examples based on concrete cases. Identifying and measuring risks. Defining controls. Dos and don'ts when preparing a gap assessment report on personal data protection.

7. Module 7 - Personal data processing in the public sector – September 14; Prof. Leonardo Parentoni

   LGPD concepts and provisions applicable to the Government. Study of the ANPD's “Guidance - Processing of personal data by the Government”. Study of the ANPD guides on personal data processing agents and on the role of the data protection officer, insofar as they apply to the topic. Models for the data protection officer in the Government: advantages and disadvantages. Case studies (Brazilian and/or foreign) related to the topic.

8. Module 8 - LGPD compliance in practice: essential documents and contract review – September 16; Prof. Yuri dos Santos

   Essential documents in an LGPD compliance process: internal privacy notice, external privacy notice, DPIA (data protection impact assessment) and LIA (legitimate interest assessment). Contracts with suppliers and service providers: essential clauses, techniques for drafting and reviewing contracts, good practices. Examples of contractual clauses.

9. Module 9 - Information Security under the LGPD: the minimum you need to know – September 19; Prof. Michele Nogueira

   Overview of the ISO 27000 family of standards. Attributes of Information Security. Risks, threats and vulnerabilities. The concept of a security incident. Countermeasures and cryptography, with an emphasis on data leaks. Information Security Policy.

A certificate will be issued by Centro DTIBR. If the full course is purchased (promotional tier/bundle), a single certificate will be issued to students who attend at least 06 modules (equivalent to approximately 66% of the course). If one or a few modules are purchased separately, an individual certificate will be issued for each module actually attended. The certificate will bear the name provided on the Sympla platform at registration, and no later corrections will be accepted. Therefore, before registering, set your name on the Sympla platform exactly as you would like it to appear on the certificate. Certificates will be sent within 30 (thirty) days after the last module of the course.