Skip to content
Forgest
Get in touch
Back to catalogue
Privacy and GDPR

Privacy and GDPR, introductory training

Introductory training on Regulation (EU) 2016/679 (GDPR) for staff authorised to process personal data. Required to meet the controller's accountability obligation.

Duration

4 hours

Delivery mode

E-learning

Target audience

All employees and collaborators who process personal data as part of their duties. Mandatory for authorised staff (Article 29 GDPR and Article 2-quaterdecies of Legislative Decree 196/03).

Regulatory reference: Regulation (EU) 2016/679 (GDPR), Legislative Decree 196/03 as amended

Recognised qualifications

Valid across the entire national territory

Qualified instructors

Professionals with hands-on field experience

3 offices + on-site

Milan, Rome, Lamezia · also at your premises

Classroom · e-Learning · Blended

Choose the delivery format that suits your organisation

Note: Course materials are delivered in Italian.

Programme

  • Regulatory framework: the GDPR and the Italian Privacy Code
  • Principles of processing: lawfulness, fairness, transparency, minimisation
  • Rights of data subjects (Articles 12-22 GDPR)
  • Roles: controller, processor, authorised person, DPO
  • Technical and organisational security measures
  • Data breach: handling and notification to the Garante
  • Penalties and liability

Objectives

Process personal data in compliance with the regulations, recognise a data breach and apply company procedures correctly. Meets the controller’s accountability requirement (Article 5.2 GDPR).

Frequently asked questions

Yes. Article 29 of the GDPR requires the controller to train the persons authorised to process data. Training forms part of the accountability obligation and may be requested by the Garante, the Italian data protection authority, in the event of an inspection.

The introductory course lasts 4 hours and can be delivered entirely as distance learning (e-learning), with a certificate valid for the purposes of company accountability.

There is no fixed legal deadline, but the Garante and European best practice recommend refreshers at least annually, or whenever there are significant regulatory changes.

A certificate of training on privacy and the GDPR, useful to document compliance with the training obligation under Article 29 GDPR and to reduce the risk of penalties.

Related courses

You might also be interested in these courses

Person authorised to process personal data

4hE-learning