| Location | Duration | Kenyan Cost | Non-Kenyan Cost | Upcoming Schedules |
|---|---|---|---|---|
| Nairobi, Kenya | 5 Days | KES 115,000 | USD 1,500 | Enroll |
| Kigali, Rwanda | 5 Days | USD 1,900 | USD 1,900 | Enroll |
| Kampala, Uganda | 5 Days | USD 1,900 | USD 1,900 | Enroll |
| Dar es Salaam, Tanzania | 5 Days | USD 2,000 | USD 2,000 | Enroll |
| Dubai, UAE | 5 Days | USD 3,900 | USD 3,900 | Enroll |
| Abuja, Nigeria | 5 Days | USD 4,000 | USD 4,000 | Enroll |
| Accra, Ghana | 5 Days | USD 4,000 | USD 4,000 | Enroll |
| Pretoria, South Africa | 5 Days | USD 3,900 | USD 3,900 | Enroll |
| Start & End Date | Duration | Kenyan Cost | Non-Kenyan Cost | Enroll | |
|---|---|---|---|---|---|
| Oct 19–Oct 27, 2026 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| Nov 02–Nov 10, 2026 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| Nov 16–Nov 24, 2026 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| Nov 30–Dec 08, 2026 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| Dec 14–Dec 22, 2026 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| Dec 28, 2026–Jan 05, 2027 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| Jan 11–Jan 19, 2027 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| Jan 25–Feb 02, 2027 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| Feb 08–Feb 16, 2027 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| Feb 22–Mar 02, 2027 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| Mar 08–Mar 16, 2027 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| Mar 22–Mar 30, 2027 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| Apr 05–Apr 13, 2027 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| Apr 19–Apr 27, 2027 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| May 03–May 11, 2027 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| May 17–May 25, 2027 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| May 31–Jun 08, 2027 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| Jun 14–Jun 22, 2027 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| Jun 28–Jul 06, 2027 | 7 Days | KES 90,000 | USD 1,000 | Register | |
| Jul 12–Jul 20, 2027 | 7 Days | KES 90,000 | USD 1,000 | Register | |
About the Course
Organizations collect and process growing volumes of employee, customer, beneficiary, patient and business-contact information. Inadequate handling of personal data can expose individuals to harm and organizations to regulatory action, operational disruption and loss of trust. Staff responsible for personal data therefore need more than general awareness; they require practical competence across the personal-data lifecycle.
This course develops foundation capability in privacy principles, lawful processing, accountability, data-subject rights, lifecycle controls, third-party processing, privacy risk and personal-data breach management. It uses relevant concepts from applicable data-protection laws, regulatory guidance, ISO/IEC 29100 and the NIST Privacy Framework while maintaining an internationally applicable structure.
Participants will analyse processing activities and develop practical compliance tools, including a personal-data inventory, lawful-basis assessment, privacy notice checklist, rights-request workflow, privacy risk register and breach-assessment record. The programme prepares participants for operational privacy responsibilities without presenting itself as a DPO or certification-preparation course.
Target Participants
This course is designed for compliance officers, legal and risk professionals, information managers, IT and cybersecurity staff, HR professionals, records managers, programme personnel, data analysts and departmental employees who collect, use, disclose, store or supervise personal data.
What You Will Learn
By the end of this course, participants will be able to:
- Identify personal data and sensitive categories of personal data
- Apply core data-protection principles to processing activities
- Assess lawful grounds for processing personal data
- Differentiate controller and processor responsibilities
- Develop procedures for responding to data-subject requests
- Assess privacy risks across the personal-data lifecycle
- Review third-party personal-data processing arrangements
- Apply foundation privacy-by-design requirements
- Evaluate personal-data breach notification factors
- Prepare practical privacy-compliance records
Course Duration
- Classroom – 5 Days
- Online – 7 Days
Course Outline
Data Privacy and Protection Context
- Meaning of privacy and data protection
- Privacy risks in digital operations
- Individual rights and organizational duties
- Regulatory expectations
- Ethical use of personal data
- Privacy accountability principles
Personal Data Classification
- Personal data identification
- Direct personal identifiers
- Indirect personal identifiers
- Sensitive personal data
- Pseudonymized personal data
- Anonymous data requirements
Data Protection Principles
- Lawfulness of processing
- Fairness in data use
- Processing transparency
- Purpose limitation
- Data minimization
- Storage limitation
Lawful Basis for Processing
- Consent requirements
- Contractual processing necessity
- Legal obligation
- Protection of vital interests
- Public-interest processing
- Legitimate-interest assessment
Privacy Roles and Accountability
- Data controller responsibilities
- Data processor responsibilities
- Joint controller arrangements
- Data Protection Officer responsibilities
- Departmental accountability
- Accountability documentation
Data Subject Rights
- Information access rights
- Personal data rectification
- Personal data erasure
- Processing restriction
- Objection to processing
- Automated decision-making rights
Personal Data Lifecycle Controls
- Personal data collection
- Data-use limitation
- Personal data disclosure
- Personal data storage
- Retention period assignment
- Secure data disposal
Privacy Risk Assessment
- Processing activity identification
- Privacy risk sources
- Harm to data subjects
- Risk likelihood assessment
- Risk impact assessment
- Privacy control selection
Personal Data Breach Management
- Personal data breach identification
- Breach severity assessment
- Notification decision criteria
- Regulatory notification
- Data-subject communication
- Breach documentation
Privacy Compliance Monitoring
- Privacy compliance indicators
- Processing-record maintenance
- Privacy control testing
- Compliance evidence
- Privacy issue tracking
- Management reporting
Practical Outputs
Participants will develop the following tangible outputs during the programme:
- A personal-data inventory
- A lawful-basis assessment record
- A privacy notice review checklist
- A data-subject request workflow
- A privacy risk register
- A personal-data breach assessment record
Training Approach
The programme combines facilitator-led explanation with processing-activity mapping, lawful-basis exercises, privacy-notice reviews, data-subject request scenarios, risk assessment and breach-response case analysis.
Organizational Benefits
- More consistent identification and handling of personal data
- Stronger application of lawful-processing requirements
- Clearer controller and processor responsibilities
- More reliable responses to data-subject requests
- Improved privacy-risk identification and treatment
- Better-documented breach-assessment decisions
- Stronger operational evidence of privacy compliance
Certification
Participants who successfully complete this course will receive a Certificate of Course Completion from Devimpact Institute, recognizing the knowledge, practical skills and competencies developed through the programme.
Tailor-Made Course
This course can be customized and delivered as an in-house programme to address the specific policies, systems, sector context and capacity-development priorities of an organization. The course duration, modules, case studies and practical exercises may be adjusted following a training needs assessment.
