Course Description
GDPR is not just for lawyers or IT teams. As a manager, you make decisions every day that engage your organisation's legal responsibility — launching a marketing campaign, hiring a new employee, choosing a SaaS provider, rolling out a monitoring tool. Every one of those decisions has a GDPR dimension — and you are the one who needs to manage it.
This course was designed specifically for non-technical managers who need to understand GDPR as it applies concretely to their professional day-to-day. No abstract theory, no inaccessible legal language — just clear decision-making frameworks, examples drawn from real situations and tools you can apply immediately in your role.
Across 7 progressive modules, you will master GDPR fundamentals, lawful bases for processing, data subject rights, vendor management, data security, international transfers and the France-specific legal framework — including CNIL requirements and French labour law. By the end of this course, you will be able to make compliant decisions independently and meaningfully reduce your organisation's risk exposure.
Why Compliance Training Matters
In 2023, the CNIL issued over €42 million in fines in France alone.
The vast majority of data breaches originate in poorly informed management decisions — not technical vulnerabilities. A manager trained in GDPR is your organisation's first line of defence. For more details Click here
Where This Course Takes You
Make compliant decisions independently
From day one after completing the course, you can make GDPR decisions without systematically depending on legal or your DPO — knowing exactly when to involve them.
Become your organisation's compliance reference
Managers trained in GDPR are invaluable to DPOs, legal teams and auditors. You become a credible compliance relay within your department.
Strengthen your profile on the job market
GDPR fluency is now an implicit expectation for any management role. This course reinforces your profile in markets where compliance has become a standalone recruitment criterion.
Gateway to compliance and DPO careers
This course provides a solid foundation for moving into specialist roles: compliance manager, deputy DPO, GDPR consultant or privacy project lead.
Certification
Course Curriculum
8 sections3 Hours total length
Fondamentaux du RGPD pour managers
- Adopter le bon réflexe RGPD en tant que décideur
- Cartographier les flux de données sans jargon
- Les principes qui guident les décisions au quotidien
- Responsabilisation (accountability) : démontrer la conformité par des preuves
- Quiz
Bases légales, transparence et confiance
- Bases légales : choisir la bonne, dès le départ
- Consentement : dans quels cas il fonctionne réellement
- Mentions d’information : ce qu’un manager peut valider sereinement
- Cookies et traceurs : règles prêtes pour la France
- Quiz
Personnes, droits et réalité RH
- Demandes d’exercice de droits : structurer un processus DSAR
- Données salariés : éviter les pièges du consentement
- Données sensibles : santé, biométrie, informations syndicales
- Enfants et publics vulnérables : garanties indispensables
- Quiz
Prestataires, contrats et responsabilité partagée
- Responsable de traitement ou sous-traitant : qualifier vos partenaires
- Contrats : clauses obligatoires et points de contrôle
- Co-responsables : objectifs partagés, risques partagés
- Partage de données : marketing et analytics
- Quiz
Gestion des risques : registre, AIPD, sécurité, violations
- Registre des traitements : construire un RoPA vivant et exploitable
- Déclencheurs d’AIPD : liste CNIL, sans improvisation
- Gouvernance sécurité : socle minimal fondé sur les risques
- Gestion de violation : sprint décisionnel sur 72 heures
- Quiz
Transferts, technologies modernes et pérennisation
- Transferts après Schrems II : l’essentiel pour managers
- Clauses contractuelles types 2021 (SCC) : vos engagements concrets
- Arbre de décision TIA pour l’usage des prestataires
- IA, profilage, biométrie : nouvelles contraintes et lignes rouges
- Quiz
Priorité France : droit du travail, règles locales et contrôle CNIL
- Architecture juridique française : LIL et textes d’application
- Surveillance au travail : CSE et Code du travail
- Référentiel RH en France : bases légales adaptées
- Sanctions CNIL : astreinte et « name and shame
- Quiz