Information Technology

Certified Information Privacy Professional (CIPP/US)

Instructor-Led 18 Agenda

Description

The Certified Information Privacy Professional/United States (CIPP/US) program, developed by the International Association of Privacy Professionals (IAPP) - the world’s largest comprehensive global information privacy community and resource, was the first professional certification ever to be offered in information privacy. The CIPP/US credential demonstrates a strong foundation in U.S. privacy laws and regulations and understanding of the legal requirements for the responsible transfer of sensitive personal data to/from the U.S., the EU and other jurisdictions. This course will provide you with a foundational understanding of broad global concepts of privacy and data protection law and practice, including: jurisdictional laws, regulations and enforcement models; essential privacy concept

Course Overview

Course Objective

It will show the world that students know privacy laws and regulations and how to apply them, and that students know how to secure your place in the information economy. When students earn a CIPP credential, it means they’ve gained a foundational understanding of broad global concepts of privacy and data protection law and practice, including: jurisdictional laws, regulations and enforcement models; essential privacy concepts and principals; legal requirements for handling and transferring data and more.

Who Should Attend

Data Protection Officers Data Protection Managers Auditors Legal Compliance Officers Security Manager Information Managers Anyone involved with data protection processes and programs

Introduction to privacy Lesson Id 1

Introduction to privacy

Structure of U.S. law Lesson Id 2

Structure of U.S. law

General Data Protection Regulation overview (GDPR) Lesson Id 3

General Data Protection Regulation overview (GDPR)

California Consumer Privacy Act of 2018 (CCPA) Lesson Id 4

California Consumer Privacy Act of 2018 (CCPA)

Enforcement of U.S. privacy and security laws Lesson Id 5

Enforcement of U.S. privacy and security laws

Information management from a U.S. perspective Lesson Id 6

Information management from a U.S. perspective

Federal versus state authority Lesson Id 7

Federal versus state authority

Healthcare Lesson Id 8

Healthcare

Financial privacy Lesson Id 9

Financial privacy

Education Lesson Id 10

Education

Law enforcement and privacy Lesson Id 12

Law enforcement and privacy

Telecommunications and marketing Lesson Id 11

Telecommunications and marketing

National security and privacy Lesson Id 13

National security and privacy

Civil litigation and privacy Lesson Id 14

Civil litigation and privacy

Legal overview of workplace privacy Lesson Id 15

Legal overview of workplace privacy

Privacy before, during and after employment Lesson Id 16

Privacy before, during and after employment

State data security laws Lesson Id 17

State data security laws

Data breach notification laws Lesson Id 18

Data breach notification laws

Lesson Id	Title	Description
1	Introduction to privacy	Modern history of privacy<br />Introduction to personal information<br />Overview of data protection roles<br />Summary of modern privacy frameworks
2	Structure of U.S. law	Structure and sources of U.S. law and relevant terms<br />Governmental bodies having privacy and information security authority
3	General Data Protection Regulation overview (GDPR)	High-level overview of the GDPR<br />Significance of the GDPR to U.S. organizations<br />Roles and responsibilities outlined in the law
4	California Consumer Privacy Act of 2018 (CCPA)	High-level overview of the newly passed California Consumer Privacy Act of 2018<br />Scope<br />Consumer rights<br />Business obligations<br />Enforcement
5	Enforcement of U.S. privacy and security laws	Distinguishing between criminal and civil liability<br />Comparing federal and state authority<br />Theories of legal liability<br />Enforcement powers and responsibilities of government bodies, such as the FTC and state attorneys general
6	Information management from a U.S. perspective	Developing a privacy program<br />Role of privacy professionals and accountability<br />Employee training<br />User preferences<br />Managing vendors<br />Data classification
7	Federal versus state authority	Differences between federal and state authority<br />Preemption
8	Healthcare	Privacy laws in healthcare<br />Major components of HIPAA<br />Development of HITECH<br />Privacy protections mandated by other significant healthcare laws
9	Financial privacy	Goals of financial privacy laws<br />Key concepts of FCRA, FACTA and GLBA<br />Red Flags Rule, Dodd-Frank and consumer protection laws
10	Education	Privacy rights and protections under FERPA<br />Recent amendments provided by PPRA and NCLBA
12	Law enforcement and privacy	Privacy laws on intercepting communication<br />Telecommunications industry and law enforcement<br />Laws ensuring rights to financial privacy
11	Telecommunications and marketing	Rules and regulations of telecommunications entities<br />Laws that govern marketing<br />Addressing privacy in the digital advertising
13	National security and privacy	Rules and regulations on intercepting communication<br />Evolution of the law<br />Collaboration of government agencies and private companies to improve cybersecurity
14	Civil litigation and privacy	Privacy issues related to litigation<br />Electronic discovery, redaction and protective orders<br />U.S. discovery rules versus foreign laws
15	Legal overview of workplace privacy	Federal and state laws regulating and protecting employee privacy<br />Federal laws prohibiting discrimination
16	Privacy before, during and after employment	Lifecycle of employee privacy<br />Background screening<br />Employee monitoring<br />Investigating misconduct and termination<br />Antidiscrimination laws<br />“Bring your own device” policies
17	State data security laws	State laws impacting data security<br />Social Security number use regulation<br />Laws governing data destruction
18	Data breach notification laws	Scope of state data breach notification law<br />Nine elements of state data breach notification laws<br />Major differences in state laws