Data protection, digital policy and cyber security

Data Protection Certification Course

Our certified Data Protection Certification course is designed to provide you with optimum preparation. It will answer your questions related to becoming a Data Protection Officer and high-level professional and it will help you deal with everyday data protection issues.

About this course

Are you willing to step into the evolving technological landscape and become a cornerstone of data protection? At EIPA, our course is designed to empower you with the legal, practical, and strategic expertise required to excel as a Data Protection Officer in today’s era of accelerated digital transformation. As organisations reshape their operations in response to breakthrough technologies and data-driven innovation, data protection remains a foundational pillar, anchored by the General Data Protection Regulation and reinforced by emerging frameworks like the Artificial Intelligence Act.

You will experience hands-on, multidisciplinary training led by experts at the cutting edge of data protection, technology and policy. Using interactive case studies, peer discussion, and scenario-based exercises, you’ll master the skills needed to design or enhance compliance frameworks, tackle real-world data protection challenges, and support your organisation’s digital ambitions.

Join us in Maastricht or online to gain the skills and confidence to uphold data protection rights, strengthen data governance, and support your organisation’s compliance journey, equipping you for the multifaceted challenges at the heart of Europe’s digital revolution!

You will learn about:

  • The European legal framework for data protection (including the GDPR);
  • Key data protection concepts, principles and obligations;
  • Actors, roles and responsibilities;
  • The role of the DPO (Data Protection Officer), the EDPS (European Data Protection Supervisor) and the national supervisory authorities;
  • Severity assessment of data breaches and assurance role of the DPO (accountability, requirements and demonstrating compliance);
  • Cyber security, data protection audits, privacy and digital sovereignty;
  • Options and solutions for cross-border data transfer and third-country data transfers;
  • e-Privacy design and impact assessment;
  • Grounds for processing, including legitimate interest and consent;
  • The rights of data subjects and how to handle them.

Course methodology

We believe practical know-how is the key to effective learning. This course therefore includes:

  • Detailed explanations of the key concepts, principles, actors and roles in the field of data protection and security;
  • Role play and group exercises;
  • Preparatory workshop for the final certification examination (optional);
  • Insights with case-law examples;
  • Input and coaching on practical issues encountered by participants from the DPO network, European institutions and agencies, Europol, Eurojust, EDPS, national authorities and other data protection experts;
  • A highly interactive approach – the structure of the course will give you opportunities to ask questions and share experiences during the dedicated Q&A sessions.

To optimise your experience, we also recommend that you follow the optional preparatory workshop for the certification examination, when time will be devoted to a recap of the essentials, exercises, a discussion and a Q&A session.

  • You will be able to process and transfer personal data, and comply with data protection requirements in your day-to-day work.
  • You will be better aware of severity assessments of data breaches, data protection audits, cyber security and privacy.
  • You will have a thorough understanding of how things work in practice and a vision of the EU’s future in this field.
  • You will have a solid basis for continuous learning as a Data Protection Officer afterwards.
  • You will benefit directly from the insights of data protection experts and from networking opportunities during the online breaks.
  • You will obtain the EIPA attendance certificate.
  • You will take the EIPA Data Protection Certification examination.
  • You will be able to qualify as a data protection professional at European level.
  • You will develop your professional international network in the field of data protection.

After taking this course, you can join EIPA’s dedicated community of practice together with other, former participants. You will also have access to the course materials for a duration of three months after the course.

  • Data Protection Officers and other data protection professionals;
  • Legal and IT professionals;
  • Anyone, from either the public or private sector, with proven working experience in the processing of personal data;
  • Anyone who needs a certification at European level in order to advance their professional career;
  • Candidates who wish to take and pass the examination.

On completion of the course, participants can take part in an exam leading to the awarding of the EIPA Data Protection Professional Certificate.

A few details about the examination:

  • Examinees can use their own device to take the examination, but will be supervised (in-person or online).
  • The examination is a practical scenario-based question.
  • The examination can be taken twice a year at EIPA headquarters in Maastricht.
  • The examination lasts 2 hours.
  • The maximum score obtainable is 100 points and in order to pass the examination, examinees need to obtain 60 points
  • EIPA considers that the use of AI in responding to the test questions of the Data Protection Certification exam is not in line with the objective of the Data Protection Certification course and the purpose of this examination. An infringement of the EIPA AI Policy will invalidate the data protection certification.
  • Examinees will be asked to sign a declaration certifying their adherence to the AI Policy.

Examination process

Review
The examination board is composed of three members: one academic expert and two expert practitioners, one active under EUDPR and one under GDPR. The academic expert is the designated reviewer of the exam submissions, while the two expert practitioners lead the creation of the examination content. This general split between responsibilities is intended to strengthen the fairness in the review process. The academic expert will consult with the relevant practitioners’ colleagues in cases of uncertainties or appeals.

Language
The examination is offered in English only. The time limit for the examination is sufficient for the vast majority of candidates, including non-native English speakers. No points are deducted due to possible grammar or language mistakes.

Handling of exams
EIPA will take all available precautions to ensure the appropriate and secure handling of completed submissions.

Examination re-sit
In the event you did not manage to reach the set threshold and did therefore not pass the exam, you are offered the opportunity to do one examination re-sit for €150 within one year.

The Examination Board
 The exam is under the supervision of an examination board. The examination board meets regularly to discuss the certification course requirements and approve the examinations. They discuss as needed to review and resolve any submitted certification appeals. The examination board consists of experts who have proven knowledge of and practical expertise in the field of data protection, one of whom will serve as chair.

Certificate validity
Data Protection issues continue to change, and it is very important to keep yourself ahead and update your knowledge regularly. Therefore, the EIPA certificate is valid for a period of two years. In order to update your knowledge and maintain the validity of your certificate you will need to attend EIPA’s refresher course on data protection every two years. You will receive an updated certificate after taking part in this.

You can find our full Certification policy here: www.eipa.eu/dataprotection.

Project number: 2511503

Hybrid course
Experience our course in a way that suits you best! This hybrid course offers the flexibility to join in-person or online through a live stream. In the registration form, you will have the opportunity to select your preferred option.

Face to Face venue
European Institute of Public Administration (EIPA)
O.L. Vrouweplein 22
6211 HE, Maastricht
the Netherlands

Project Officer
Marieke Lardinois
Tel: +31 (0)43 32 96 205
m.lardinois@eipa.eu

Fee
The fee includes documentation, refreshments, lunches, and a dinner. Accommodation and travel costs are at the expense of the participants or their administration.

Discounts
EIPA member fee
EIPA offers a discount to all civil servants working for one of EIPA’s supporting countries, and civil servants working for an EU institution, body or agency.

Who are the supporting countries?
Civil servants coming from the following EIPA supporting countries are entitled to get the reduced fee: Austria, Belgium, Bulgaria, Cyprus, Denmark, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Spain, Sweden.

For all other participants, the regular fee applies

Loyalty coupon
As a token of appreciation we offer all our participants a loyalty coupon for one of our future courses. The offer can be shared with colleagues and relevant networks. The coupon will expire one year after its release. This discount is not cumulative with other discounts, except for the EIPA member fee.

Meals
Dietary preferences can be indicated on the registration form.

Hotels
EIPA has a special price arrangement with a few hotels. The hotels are within walking distance from EIPA. Payment is to be made directly and personally to the hotel upon checking out.

Confirmation
Confirmation of registration will be forwarded to participants on receipt of the completed online registration form.

Payment
Prior payment is a condition for participation.

Cancellation policy
For administrative reasons you will be charged €150 for cancellations received within 15 days before the activity begins. There is no charge for qualified substitute participants. EIPA reserves the right to cancel the activity up to 2 weeks before the starting date. In that case, registration fees received will be fully reimbursed. EIPA accepts no responsibility for any costs incurred (travel, accommodation, etc.).

A few days before the start of the course you will receive the log-in details for accessing the course materials. You can log in here.

Our experts

Elisa Moro

Elisa Moro

Council of the European Union

Programme

08.30Registration of participants/Opening of the online platform for online participants
09.00Introduction to the course
Florina Pop, Senior Expert/Data Protection Expert, EIPA, Maastricht (NL)
09.30Data protection: the basics and the European legal framework.
Elisa Moro, Data Protection Officer, Council of the EU, Brussels (BE)
10.15Q&A
10.30Coffee Break
11.00Data protection: key principles and lawfulness
Elisa Moro
11.45Q&A
12.00Lunch at Hotel Derlon
13.30Main Players in Data Protection: Data Controller-Joint Controller-Data Processor
Emma Rodríguez Montes, Data Protection Specialist in the Data Protection Office, EUIPO, Alicante (ES)
14.15Q&A
14.30Coffee Break
15.00Data Subjects Rights – Part I
Maria Veronica Pérez Asinari, Head of Sector Data Protection Advice at European  Commission DG CONNECT, Brussels (BE)
16.00Coffee Break
16.30Data Subjects Rights Part II
Maria Veronica Pérez Asinari
17.45Q&A
18.00End of the Day
08.45Opening of the online platform for online participants
09.00The role of the Data Protection Officer (DPO): skills and daily work basis
Diana Alonso Blas, Data Protection Officer, Eurojust, The Hague (NL)
10.00Coffee Break
10.30Workshop on the role of the DPO (Case studies)
Diana Alonso Blas
Gloria Folguera Ventura
, Data Protection Officer, EUIPO, Alicante (ES)
11.30Q&A
11.45Information on the certification examination and Q&A
Maria Veronica Pérez Asinari, Rosa Barcelo, Global Privacy and Cybersecurity Partner at McDermott Will & Emery, Brussels (BE) – online
Björn Hölbling, Digital Officer, EIPA, Maastricht (NL)
12.30Lunch at EIPA’s restaurant
13.30Data Protection Risk Framework: Evaluation and Control inside your Organisation

Gloria Folguera Ventura

14.15Q&A
14.30Coffee Break
15.00Supervising data protection compliance: The role of the data protection authorities. Examples from EU institutions

TBC

16.00Q&A
16.15Supervising data protection compliance: The role of the data protection authorities. Examples from National Administrations (EDPB+ DPA)
Jekaterina Macuka, Director at Data State Inspectorate of the Republic of Latvia, Riga
17.00Q&A
17.15End of the day
19.00Dinner
08.45Opening of the online platform for online participants
09.00Cross-border data transfers – options and solutions
Diana Alonso Blas
10.15Coffee Break
10.45Group exercise: cross-border data transfers in practice (interactive session 1)
Diana Alonso Blas
11.30Group exercise: cross-border data transfers in practice (interactive session 2)
Diana Alonso Blas
12.15Q&A
12.45Lunch at Hotel Derlon
14.15Data Protection Impact Assessment
Maarten Daman, Data Protection Officer, European Central Bank (ECB) & European Systemic Risk Board (ESRB), Frankfurt (DE)
15.15Q&A
15.30Coffee Break
15.45The present and the future of the DPO: framework AI implementation for DPOs
Maarten Daman
16.30Q&A
16.45Coffee Break
17.00ePrivacy Directive – Part of the Comprehensive Data Protection Framework

Rosa Barcelo

17.45End of the day
08.45Opening of the online platform for online participants
09.00Data protection and data security: it’s all about the protection of information
Daniel Drewer, Data Protection Officer, Europol, The Hague (NL)
10.00Q&A
10.15Coffee Break with Limburg Treat
10.45Data protection audit: only nice to have or a must for DPOs?
Daniel Drewer
11.45Q&A
12.00Lunch at EIPA’s restaurant
13.15Current cyber threat landscape
Muyiwa Olufon, Chief Information Security Officer (CISO), Flutterwave Nairobi (KE/NL)
14.00Data breaches: accountability of the DPO as assurance provider (Interactive session)
Daniel Drewer and Muyiwa Olufon
16.00Coffee Break
16.15Workshop: preparing for the certification examination
Rosa Barcelo
Maria Veronica Pérez Asinari
18.00End of the day
08.45Opening of the online platform for online participants
09.00Entrance & getting installed
09.30Certification/Re-sit examination
11.30End of the examination
11.45Take-away lunch

Why you should book this course

What former participants say

Data Protection Certification Course

8 Dec 2025 - 12 Dec 2025
Maastricht (NL) & Online
Register before: 23 Nov 2025
 2.695 per attendee
 2.425 for EIPA members

Related courses

Register before: 23 Nov 2025