European Data Protection Law and Regulation
- Basic GDPR concepts: personal data, sensitive data, special categories, pseudonymous vs anonymous data, lawful processing principles, controller vs processor, data subject
- Security requirements: technical and organisational measures (encryption, access controls), breach notification, vendor management, third-party data sharing
- Data subjects rights: access, rectification, erasure/RTBF, restriction, objection, consent and withdrawal, automated decision-making and profiling, data portability, EDPB guidelines on rights restrictions