Skip to content
Privacy Practice LabLearn. Implement. Prove it.

Intermediate

Practical Privacy Program Implementation

Learn how to create data inventories, processing records, assessments, policies, request workflows, retention processes and measurable privacy controls.

4 hours9 modules10 lessonsFree certificate

About this course

An implementation course for people who have to build the privacy program, not just describe it. Each module walks through the artefact you need to produce, the questions you have to ask the business, and how to keep the result maintainable once the project ends.

What you will be able to do

  • Structure a privacy program that fits your organisation's size
  • Run a data discovery exercise and build a usable inventory
  • Produce records of processing activities from real inputs
  • Design a data subject request workflow that meets deadlines
  • Measure privacy program performance with meaningful metrics

Course content

  1. 1

    Building a Privacy Program

    Scope, sponsorship, operating model and a realistic first-year plan.

    • What a privacy program is actually for14 min
    • Sponsorship, scope and the first ninety days15 min
    • Choosing an operating model that survives13 min

    4-question quiz

  2. 2

    Data Discovery and Data Inventory

    Finding personal data across structured and unstructured systems.

    • Finding personal data before you try to govern it22 min

    4-question quiz

  3. 3

    Records of Processing Activities

    Turning discovery output into a maintainable RoPA.

    • Turning discovery output into a maintainable RoPA22 min

    4-question quiz

  4. 4

    Privacy Impact Assessments

    Running assessments that change decisions rather than document them.

    • Running privacy impact assessments that change decisions23 min

    4-question quiz

  5. 5

    Data Subject Request Workflows

    Intake, identity verification, retrieval, review and response.

    • Building a data subject request workflow that meets deadlines22 min

    4-question quiz

  6. 6

    Retention and Secure Deletion

    Retention schedules that survive contact with the business.

    • Retention schedules that survive contact with the business22 min

    4-question quiz

  7. 7

    Vendor and Third-Party Assessments

    Assessing processors proportionately and tracking them over time.

    • Assessing vendors proportionately and tracking them over time23 min

    4-question quiz

  8. 8

    Privacy Metrics and Program Improvement

    Metrics that show whether the program is actually working.

    • Choosing privacy metrics that prove the program works21 min

    4-question quiz

  9. 9

    Final AssessmentFinal assessment

    Confirm your understanding across the full course.

    10-question final assessment