(Hot Pick!!) Understanding of the EU General Data Protection Regulation (GDPR) and HK Personal Data Protection Ordinance (PDPO) - 1 Day Requirements Training

1 day In-person Next: 14 Dec 2026 English / Zh-yue Identifier: 190543580
(Hot Pick!!)  Understanding of the EU General Data Protection Regulation (GDPR) and HK Personal Data Protection Ordinance (PDPO) - 1 Day Requirements Training

Course Overview

Who This Course Is For

This introductory course is suitable for any individuals with vested interested in data privacy, especially if you are:

  • a compliance or legal professional

  • e-commerce, cloud applications, customer services, or sales operators who handle a lot of privacy data

  • an IT system administrators managing the information security of privacy data

  • Any professionals who need a working knowledge of EU GDPR and HK PDPO

About this course

REASONS FOR KNOWING GDPR: 

The European Union’s General Data Protection Regulation (GDPR) is not just a regulation applicable within EU and only to EU citizens. It has global impacts to all businesses around the world. Many jurisdictions, including China, Japan, South Korea, and even Hong Kong’s PDPO, share many concepts from GDPR:

  • Data subject rights
  • Data breach notification
  • Accountability and governance
  • Cross-border transfer rules
  • Data minimization and purpose limitation

GDPR compliance signals:

  • Strong governance
  • Mature security practices
  • Respect for customer privacy

For HK companies competing globally -- especially in finance, tech, logistics, and professional services -- this is a differentiator.

WHAT MAKES THIS COURSE DIFFERENT FROM OTHER GDPR COURSES: 

  • Implementation and real-world examples for each requirement from GDPR & PDPO are shown
  • Trainers are also ISO/IEC 27001 (information security management system) ISO/IEC 27701 (personal information management system) trainer and auditor. Experiences from auditing these standards, and relevance of GDPR & PDPO to these standards will be shared.


COURSE OUTLINE: 

  • Applicability of GDPR and why it is also appliable to HK companies

  • Responsibilities of data controller & processor, and other significant definitions in GDPR

  • The six privacy principles

  • The eight data subject rights

  • Significant requirements, including

    • Data processing agreement

    • Security of processing

    • Data protection impact assessment

    • Cross-border data transfer

    • Binding corporate rules

    • Data breach notification

  • Similarities and differences between GDPR and HK PDPO

  • Examples and case studies

PROFESSIONAL TRAINER:

  • Certified Information Privacy Professional / Europe (CIPP/E) or Certified Data Protection Solutions Engineer (CDPSE)
  • Certified Information Systems Auditor (CISA);
  • ISO/IEC 27701 Lead Auditor, ISO/IEC 27001 Lead Auditor, ISO/IEC 27017 (cloud security), ISO/IEC 27018 (privacy on public cloud) Lead Auditor, ISO/IEC 27001 Lead Auditor Course trainer
  • EU GDPR trainer

CERTIFICATION (Attendance: 100%)

Learners who successfully completed the course with full attendance will be issued a certificate by SGS Hong Kong Limited.

GENERAL INFORMATION

Venue: T.S.T. / Kwun Tong / Jordon / Wan Chai / Sheung Wan Training Centre / HKSTP/ TBC

Medium: Cantonese supplemented with English materials

*Early Bird Price will be offered to participant whose enrolment is made one month prior to the course or online booking

Not sure if this is right?

Let us help you find the perfect match.

Course Finder