Certified U.S. Data Privacy Officer

Develop practical knowledge of U.S. data privacy laws, governance, risk assessment, data security, cybersecurity audits, incident management, and compliance practices to support organizational privacy programs and responsible personal data management.

Course Overview

The Certified U.S. Data Privacy Officer training course provides professionals with the knowledge and practical understanding needed to support organizational privacy programs and navigate the U.S. data privacy landscape. It addresses key privacy principles, federal and state privacy requirements, regulatory guidance, recognized standards, and the NIST Privacy Framework.

The course covers privacy governance, compliance obligations, risk assessment, data security, records management, cross-border data governance, cybersecurity audits, incident management, continuous monitoring, and privacy training. Participants also develop capabilities related to data mapping, policy development, data-subject requests, vendor risk, stakeholder engagement, and incident response. The training concludes with a case study, course recap, question-and-answer session, and certification exam.

Course Objective

  • Analyze key concepts and requirements of U.S. privacy law, including HIPAA, GLBA, COPPA, FERPA, FCRA, CCPA/CCPAR, and CPA
  • Explain the relationship among U.S. privacy laws, regulatory guidance, and standards
  • Apply the NIST Privacy Framework to support privacy compliance and governance
  • Perform data mapping and support privacy policy development
  • Conduct cybersecurity audits and privacy-related risk assessment activities
  • Implement security controls designed to protect personal data and support privacy compliance
  • Support privacy training and stakeholder engagement activities
  • Provide information and advice regarding applicable U.S. privacy obligations
  • Monitor compliance, manage data-subject requests, and address vendor risk
  • Coordinate privacy-related incident response and notification activities

Pre-requisites

Participants should have a general understanding of data protection concepts, organizational governance, and compliance practices. Experience in privacy, legal, compliance, risk management, or information security is recommended but not required.

Course Curriculum