Bestseller Digitalisation Innovation Sustainability

Specialist for Data Protection and Security

Swipe

Learning content

Let’s start small…because even if we all have a rough idea of what data is, very few of us realise what exactly data means in the legal sense. You will learn what personal data is and why it is particularly worth protecting. This forms the basis for all subsequent content.

General Data Protection Regulation: It is feared and has permanently changed the world of data protection. It defines how personal data has to be handled at a European level. The GDPR is not the only legal regulation that will be relevant to your work. Of course, you will learn in detail what the GDPR entails, so that no one will end up with sweaty palms when this buzzword is mentioned. You will also find out about national and local legislation and how they relate to each other.

The GDPR applies within the European Union. However, many digital services process their data outside this zone and are therefore not subject to European legislation. You will therefore learn what you need to bear in mind when transferring data to third countries. You will learn about the situation in the USA in particular, as this is where many digital providers are based.

Once you understand the legislation, it’s all about managing personal data correctly. This is because every company collects data and must adhere to a very specific process. You will learn what rights and obligations you have as a company and how processes must be structured so that data protection is practised throughout the entire company. For example, you will find out what order processing is, but also how you can train employees in handling personal data.

Data protection is about the legal aspects, i.e. what data you are legally allowed to collect and what rights and obligations you then have.

Data security, on the other hand, deals with the technical and organisational aspect of data processing. In other words, it is about securing the data that is generated in your company and that you are legally authorised to collect in such a way that no data breach occurs.

Data security in particular is an area where things get very technical. But don’t worry: you don’t have to become an IT specialist to keep up. It is much more important that you learn to speak the right language in order to understand IT specialists. Because in the field of data security in particular, there is often no getting around external service providers or programmes. As a data protection and security specialist (IHK), you will be able to formulate your needs in such a way that a suitable solution can be found. You will understand the requirements and information of IT specialists.

Data processing happens everywhere in a company – not just on the homepage or when there is contact with customers. After all, we work with a variety of digital programmes these days!

Your role is therefore by no means limited to keeping an eye on the website and social media. Whether it’s plugins for the website, project management tools or special programmes for production and service, you will be able to analyse them in terms of data protection. This is important in the purchasing process, where you can make recommendations. And of course you will be able to transfer them to the data protection management system after the purchase.

Modules

In the digitalised world, you can’t avoid the topic of data protection, whether you’re a company or a private individual. Nevertheless, laws and guidelines such as the GDPR are still a black box for many people. This course will familiarise you with the legal regulations and show you step by step how to implement them systematically and sustainably in your company.

Module overview

01
General provisions on data protection

In this module, you will get to know the experts who will guide you through this learning experience. You will learn what data actually is and why it needs to be protected. The General Data Protection Regulation, or GDPR for short, is central to this. Your experts will familiarise you with the structure, content and scope of this regulation.

02
Data protection principles

Data protection is largely influenced by the GDPR. In the second module, you will learn about the principles of the regulation. We look at the legal basis laid down in the first articles. You will learn what the term “personal data” means and how you have to process it in your company. You will expand your basic knowledge from module one with the most important basics for your daily work in data protection.

03
Dealing with data subjects – rights and obligations

The third module is all about the “affected persons”. You already know the different categories of these people. Now let’s go into more detail together. In the following lessons, you will learn what the GDPR prescribes for handling data subjects. There are many obligations that a company must fulfil in order to work in compliance with data protection regulations.

04
Living data protection in the company

In the fourth module, you will learn about the work of a data protection specialist. Who is responsible and who implements? What does it mean when someone processes data “on behalf of” you? Our experts will answer these and many more questions in this module. You will learn in a practical way how data protection specialists work, what tools are available and why it is ultimately a team effort.

05
What happens when third countries come into play?

We have long been able to communicate with almost the entire world, both privately and in a corporate context. This means that data is also sent around the world. But how do you deal with this when you send personal data to third countries to which the GDPR does not apply? What do you need to bear in mind if, for example, digital service providers store data abroad?

06
Backing up data correctly – data security

In addition to the correct handling of data, it is also important to store this data securely so that it remains hidden from third parties. All of this is summarised under “data security” in the GDPR. In the sixth module, we want to take a closer look at this topic. You will learn what the difference between data protection and data security is and where you can find it in the GDPR. You will also find out what an appropriate level of protection is and what is involved in a risk assessment.

07
Data protection management systems

Module seven deals with data protection as part of a structured management system so that data protection can be practised throughout the entire company. You will learn how the processes need to be structured, which documents need to be maintained regularly and what non-specialist employees need to know about data protection.

08
Data protection on websites and social media

Nowadays, almost nothing works without a website and social media presence. A lot of data is collected and stored online in particular. In the eighth module, we take a brief excursion into data protection regulations for digital channels. You’ve probably already heard about terms and conditions and the legal notice. But why do you come into contact with these terms so often? What exactly are companies’ obligations? You’ll find out in this module.

09
The IHK Review

You made it to the IHK review! That’s amazing! We are proud of you! In a moment, the two experts will wish you good luck for the exam and then you can start if you want. Good luck!

Swipe

Experts

Expertin DAT Stepahnie Kurth
Stefanie Kurth
Managing Director, TÜV-certified Data Protection Auditor

Stephanie is an external data protection officer and management consultant. Her focus is on young female entrepreneurs who run their own websites. A media management graduate, she started out in regional management. From there, she went into the private sector as a management assistant in an IT consultancy, where she was later also an authorised signatory. In addition to her data protection consultancy work, Stephanie is now the managing director of a start-up that manufactures sustainable lamps. She passes on her knowledge of data protection as a lecturer at the Thuringian Centre for Business Start-ups and Entrepreneurship.

Experte DAT Rainer Horbach
Rainer Horbach
Managing Director and Lawyer

Rainer has been a lawyer since 2012 and specialises in advising and representing clients in the healthcare sector. He completed his training as a specialist lawyer for medical law in 2019. As Managing Director of DATAprivat GmbH, he has represented over 200 healthcare organisations throughout Germany for many years as an external, company data protection officer. He is certified according to GGD cert.EU. He also works as an expert for the evaluation of medical and therapeutic practices.

Expertin DAT Agi
Agatha Wierzbanowski
Lawyer and Legal Counsel

Agi is a lawyer registered to practice in Germany who has worked on sports law issues at the Federal Ministry of the Interior and media law at a major German TV station. Today she lives in Switzerland, where she has worked as legal counsel in various companies and has been involved in projects such as the introduction and implementation of the General Data Protection Regulation. Agi enjoyed it so much that she started her own business as a legal advisor and coach in 2021. Through her Instagram channel “Agi Wee”, she reaches out to young self-employed people on legal topics relating to their online business, social media presence, websites and marketing.

Swipe

Career opportunities

As a specialist, you will be responsible for an essential area of the company. You can take on this role after your training:

  • The link between management and employees in matters of data protection,
  • responsible for cooperation with external data protection officers.

If you are just starting a new business, you are in a position to correctly consider data protection requirements from the outset.

What you can expect

New responsibilities

You open up an area of work without which no company can exist. This must be carefully built up and maintained.

More responsibility

Companies are legally obliged to protect data, so accuracy and care are essential. As a specialist, you bear great responsibility.

Higher salary

Your extensive new tasks and responsibilities will be reflected in the higher salary you can demand.

Swipe
Try many training and development courses free of charge
and with no obligation.Pay only after your free trial.

Your advantages

Discover your potential

Many people promise the job of your dreams, but only a few help you to find out how you can find meaning and fulfilment. With us, you start with a free potential analysis that shows you where your journey could take you and how you can get there.

Develop actively and flexibly

We are there for you at every stage of your life: for your personal and professional development and when you are preparing for new tasks in your company or looking for your dream job.

Use time and money wisely

What do you need for your further development in your current situation? With us, you can access tried and tested, top-rated measures depending on the situation and always invest in exactly what you need right now.

Shape your future in a healthy, motivated and competent way

Together we create the conditions for you to shape your path sustainably. We will support you, but you’ll be the one doing it.

Swipe

Prices

Specialist for Data Protection and Security

One-off payment 1.129 €
Monthly from 23,18 €

Frequently asked questions

We begin with a conversation to clarify your goals, challenges, and overall context. Based on this, we collaboratively design a customized learning program – modular, flexible, and practice-oriented.

 

Learning Journeys are structured learning paths designed around specific roles, challenges, or development goals. They combine Workshops, Micro Learnings, Coaching Sessions, and Reflection Phases.

Our clients come from a wide range of industries – including manufacturing, healthcare, education, public administration, retail, logistics, and IT.
Thanks to the diversity of our corporate group, we bring extensive experience across various sectors and company sizes.
This enables us to deliver tailored solutions that are both professionally and culturally aligned.

The majority of our training programs are certified by the Chamber of Industry and Commerce (IHK) or based on internationally recognized standards such as Scrum.org.
Our language courses can conclude with a Telc examination – particularly relevant for official recognition by authorities and institutions.
For most other formats – such as Micro Learnings, Micro Learning Series, or non-certified trainings – we issue certificates of participation for your personal records.
Coachings are individual development formats and generally do not lead to a formal certificate.

The education providers of the Constellation Academy group are also AZAV-accredited – a prerequisite for funding via education voucher, AVGS and the Qualification Opportunities Act (QCG).

Yes. The education providers in the group are AZAV-accredited. Jobseekers use an education voucher (Bildungsgutschein) or AVGS from the employment agency or Jobcenter, companies use funding under the Qualification Opportunities Act (QCG), and language courses are funded among others via BAMF. We clarify which funding applies in an initial consultation.

That depends on your goal: retraining or coaching with a voucher → BBQ, GPB or Fired Up; support for people with mental or social impairments → BSG; IHK advanced qualifications → Wirtschaftsakademie am Ring or thekey.academy; languages → FOKUS; consulting for your organisation → meta five; a degree → AIHE; alternative medicine → HPA. Or simply write to us via the contact form – we will put you in touch with the right people.

Do you still have questions?

You can find more answers here!