Corporate training in the Gulf, London, Europe & Asia since 2015
+44 7462 102778[email protected]WhatsAppالعربية
Enquire now
CoursesSubjectsVenuesIn-House TrainingWhy ARUKContactالعربيةEnquire now
DB-008

Certified Data Protection Officer (CDPO)

Intensive 5-day course · English, Arabic & European languages

Professionals handling sensitive personal or company data develop a privacy framework in a 5 day course with 8 modules. Delegates examine data protection principles, lawful processing, individuals' rights and breach procedures. The course covers GDPR, CCPA and DIFC law, with security, cross-border transfers and governance included alongside the responsibilities of the Data Protection Officer (DPO).

Classroom

Public courses in our cities

  • 26–30 Oct 2026Doha£4,200 + VAT
  • 9–13 Nov 2026Kuala Lumpur£1,800 + VAT
  • 23–27 Nov 2026Abu Dhabi£4,200 + VAT
  • 14–18 Dec 2026Barcelona£3,080 + VAT
  • 28 Dec – 1 Jan 2026Jeddah£4,200 + VAT
  • 4–8 Jan 2027Barcelona£3,080 + VAT
Show 23 more dates
  • 18–22 Jan 2027Berlin£3,400 + VAT
  • 1–5 Feb 2027Frankfurt£2,600 + VAT
  • 15–19 Feb 2027Milan£3,400 + VAT
  • 8–12 Mar 2027Rome£3,400 + VAT
  • 22–26 Mar 2027Malaga£3,080 + VAT
  • 12–16 Apr 2027Kuala Lumpur£1,800 + VAT
  • 26–30 Apr 2027Sarajevo£3,400 + VAT
  • 10–14 May 2027Barcelona£3,080 + VAT
  • 24–28 May 2027Dubai£4,200 + VAT
  • 7–11 Jun 2027Barcelona£3,080 + VAT
  • 21–25 Jun 2027Riyadh£4,200 + VAT
  • 5–9 Jul 2027Frankfurt£2,600 + VAT
  • 19–23 Jul 2027Doha£4,200 + VAT
  • 9–13 Aug 2027Rome£3,400 + VAT
  • 23–27 Aug 2027Geneva£4,200 + VAT
  • 13–17 Sep 2027Kuala Lumpur£1,800 + VAT
  • 27 Sep – 1 Oct 2027Abu Dhabi£4,200 + VAT
  • 11–15 Oct 2027Barcelona£3,080 + VAT
  • 25–29 Oct 2027Cairo£2,280 + VAT
  • 1–5 Nov 2027Barcelona£3,080 + VAT
  • 15–19 Nov 2027Jeddah£4,200 + VAT
  • 6–10 Dec 2027Frankfurt£2,600 + VAT
  • 20–24 Dec 2027Singapore£4,200 + VAT

Group discount: 2 delegates 20% · 3 delegates 35% · 5 or more delegates 50%

Can't make these dates? We can run this course for your team on dates that suit you. Ask for custom dates · In-house options

Online (live)

With a trainer, on dates to suit your team

This course can be taught live online by a trainer, in English, Arabic or any European language, for one person or a whole team.

£1,850 + VAT

Group discount: 2 delegates 20% · 3 delegates 35% · 5 or more delegates 50%

Special requests

Tailor this course

Pick what you want changed and we’ll come back with a proposal and price.

Special request

Certified Data Protection Officer (CDPO)

What would you like to change? (pick any)
or

Course overview

Sensitive data requires considered handling. CDPO examines data protection compliance in the UAE, the GCC and internationally, with practical work on building and implementing an organisational privacy framework. Coverage includes the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA) and DIFC Data Protection Laws 2020, alongside other relevant legislation.

The material follows the responsibilities involved in processing personal data. Delegates consider controllers and processors, agreements, consent and legitimate interests before examining privacy notices, access requests, breaches and complaints. Internal investigations sit within the work on handling requests and incidents. Security topics include pseudonymisation and encryption, while transfer mechanisms and the Schrems II case inform the discussion of cross-border data flows.

Governance provides evidence of compliance. The DPO role includes communication, cooperation with the Commissioner and annual risk assessment. Records of Processing Activities (RoPA), Data Protection Impact Assessments (DPIAs), monitoring and risk mitigation accompany the work on accountability, with current cases used in interactive discussion.

Course objectives

By the end of the course, delegates will be able to:

  1. Define data protection principles and the rights of data subjects
  2. Determine a lawful basis for processing data
  3. Handle subject access requests, data breaches and internal investigations
  4. Apply suitable mechanisms for transferring personal data across borders
  5. Develop and implement an organisational privacy framework

Target competencies

  • Operational compliance
  • Decision-making
  • Stakeholder communication
  • Information governance
  • Policy development

Who should attend

This course suits:

  • People handling sensitive personal or company data
  • Compliance officers and managers
  • Auditors
  • IT managers
  • Human resources professionals
  • Database professionals
  • Information security, incident management and business continuity professionals responsible for secure data handling
  • Current data protection officers seeking qualification or updated knowledge of laws

Training methodology

  • Facilitator-led presentations introduce the material interactively.
  • Group discussion uses current case studies from practice.

Course modules

  1. Module 1

    Data protection principles and responsibilities

    • GDPR and DIFC Data Protection Laws 2020
    • Other relevant legislation on data protection
    • Terminology used in data protection
    • Personal data and special data categories
    • Principles for protecting data
    • Responsibilities of controllers and processors
    • Agreements governing data processing
  2. Module 2

    Grounds for lawful processing

    • Lawful bases for personal data processing
    • Processing special categories of personal data
    • Conditions needed for consent
    • Reliance on legitimate interests
  3. Module 3

    Notices, rights and access

    • Preparing privacy notices
    • Rights held by data subjects
    • Handling Subject Access Requests (SARs)
  4. Module 4

    Breaches, complaints and consequences

    • Processor obligations
    • Notifying the Commissioner
    • Notifying affected data subjects
    • Procedures following a breach
    • Remedies, liability and sanctions
    • Handling complaints and mediation
    • Fines associated with breaches
  5. Module 5

    Technical protection of data

    • Securing data
    • Using pseudonymisation
    • Using encryption
  6. Module 6

    Work of the data protection officer

    • DPO duties and obligations
    • Processing that carries high risk
    • Communication with data subjects
    • Cooperation with the Commissioner
    • Considering the annual risk assessment
  7. Module 7

    Transfers across jurisdictions

    • Transfers outside a jurisdiction without adequate protection
    • Countries offering adequate protection
    • The Schrems II case
    • Use of Standard Contractual Clauses
    • Use of Binding Corporate Rules
    • Derogations for transfers
  8. Module 8

    Accountability and compliance governance

    • Accountability as evidence of compliance
    • Steps towards achieving compliance
    • Records of Processing Activities (RoPA)
    • Methods for reducing risk
    • Monitoring adherence to requirements
    • Data Protection Impact Assessments (DPIAs)

Certificate

Every delegate who completes the course receives an ARUK Training Certificate of Attendance.

Frequently asked questions

How do I register?

Choose a date and city in the schedule and press Register, or send us an enquiry. Our team confirms your place and sends an invoice.

Are fees shown with VAT?

Fees are shown per delegate and exclude VAT, which is added to the invoice where applicable.

Can this course be delivered for our team only?

Yes. Any ARUK course can be delivered in-house at your premises, in a meeting room we book for you, or 1-to-1.

Is this course available online?

Yes. We run it live online with a trainer, on dates that suit your team, for £1,850 + VAT per delegate.

Is there a group discount?

Yes. 20% for 2 delegates, 35% for 3 delegates and 50% for 5 or more delegates on the same course.

Can the course be delivered in Arabic or another language?

Yes. Our courses can be delivered in English, Arabic or any European language, by a trainer who teaches in that language. Mention your preferred language when you register or enquire.

What certificate will I receive?

An ARUK Training Certificate of Attendance.

Related courses

Register

Certified Data Protection Officer (CDPO)

Key booking terms (read before you register)
  • The full fee is paid in advance, before the course starts.
  • Cancel in writing 30 or more days before the start date (45 for in-house) for a refund. Later than that, the full fee is payable.
  • No refund for non-attendance or partial attendance.
  • Places are for the named delegate only; another person cannot attend instead.
  • Moving to another date or city is only possible if ARUK agrees in writing.
  • Travel, accommodation and visas are your responsibility. A refused visa does not change the cancellation terms.

booking terms and conditions

Get a quotation

Certified Data Protection Officer (CDPO)