Course on Data Protection Regulations in Insurance
Online 300-hour course in data protection regulations in insurance. 6 modules covering Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD) and OneTrust. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this programme. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Apply data protection principles to the insurance lifecycle.
Prepare the record of processing activities and the mandatory documentation.
Manage the exercise of data subjects' rights.
Analyse specific processing such as health data, telematics and shared files.
Carry out a data protection impact assessment.
Manage security breaches and their notification to the authority.
Design a privacy compliance plan for an insurer.
Who it's for
- Data protection officer looking to specialise in Data Protection Regulations in Insurance.
- Privacy consultant in insurance looking to specialise in Data Protection Regulations in Insurance.
- Data protection auditor looking to specialise in Data Protection Regulations in Insurance.
- Information security manager looking to specialise in Data Protection Regulations in Insurance.
- Regulatory compliance analyst looking to specialise in Data Protection Regulations in Insurance.
- Privacy lawyer looking to specialise in Data Protection Regulations in Insurance.
- Engineering or science graduates seeking to enter insurers.
What you'll work with
- Regulation (EU) 2016/679 (GDPR)
- Organic Law 3/2018 (LOPDGDD)
- Law 20/2015 (LOSSEAR, art. 99 on personal data)
- EDPB Guidelines 01/2020 (connected vehicles)
- Directive 2002/58/EC (electronic privacy)
- ISO/IEC 27701 (privacy management)
6 modules · 300 h
1.1Data processed in the insurance lifecycle1.2Controller and processor1.3Processing principles1.4Legal bases applicable to the sector1.5Special categories of data1.6Health data and its regime1.7Data of injured third parties1.8Sector vocabulary and acronyms1.9Supervisory authority and its criteria1.10Exercise: inventory of processing activities of an entity
2.1Record of processing activities2.2Information to data subjects2.3Consent management where applicable2.4Data protection impact assessment2.5Data protection officer2.6Contracts with processors2.7International transfers2.8Security measures and their justification2.9Retention and erasure2.10Practice: drafting a record of processing activities
3.1Access, rectification and erasure3.2Objection and restriction of processing3.3Data portability3.4Automated decisions and profiling3.5Internal procedure for handling rights requests3.6Deadlines and form of response3.7Identification of the applicant3.8Reasoned refusal and its limits3.9Complaints to the authority3.10Practice: procedure for handling rights requests
4.1Underwriting and health data4.2Telematics and driving data4.3Fraud prevention and shared files4.4CCTV and expert assessment4.5Marketing and commercial communications4.6Transfers between group entities4.7Biometric data and its use4.8Artificial intelligence and data protection4.9Anonymisation and pseudonymisation4.10Practice: lawfulness analysis of a processing activity
5.1Detection and assessment of a breach5.2Notification to the authority and affected persons5.3Incident documentation5.4Compliance audit5.5Data protection indicators5.6Training and awareness5.7Privacy by design5.8Relationship with information security5.9Penalties and their prevention5.10Practice: breach management protocol
6.1Choice of entity and scope6.2Inventory of processing activities6.3Lawfulness and legal bases analysis6.4Impact assessment of a processing activity6.5Procedure for rights and breaches6.6Security measures plan6.7Training and culture plan6.8Indicators and audit6.9Programme report6.10Project defence
How you'll learn
100 % online training on the SEIUM campus, with downloadable material, recorded classes and assigned technical tutor. No fixed timetables: the learner progresses at their own pace within the intake, which makes it compatible with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is OneTrust, PILAR (risk analysis), Gestiona EIPD tool (AEPD), advanced Excel, in free, academic or evaluation versions. Tests are studied on real data protection impact assessment procedures, breach management simulations and record of processing activities audits. Assessment is continuous per module plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Apply data protection principles to the insurance lifecycle.
Prepare the record of processing activities and the mandatory documentation.
Manage the exercise of data subjects' rights.
Analyse specific processing such as health data, telematics and shared files.
Carry out a data protection impact assessment.
Where this takes you
Requirements
- No prior degree required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient level of Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 300 hours in total, spread over 3 to 5 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
The course works with OneTrust, PILAR (risk analysis), Gestiona EIPD tool (AEPD), advanced Excel. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An own SEIUM diploma upon passing the continuous assessment and the integrative project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area are credited towards the higher programme. Check the recognition policy when you enrol.
Related programmes
Course in Quality Standards in Claims Management
Online 300-hour course in quality standards in claims management. 6 modules covering ISO 9001 (quality management systems), ISO 10002 (complaints handling) and Guidewire ClaimCenter. Assigned tutor…
Insurance Course for International Logistics Corridors
300-hour online course in insurance for international logistics corridors. 6 modules covering the CMR Convention (1956), the Montreal Convention (1999) and SAP TM. Assigned tutor and…
IMO Regulations Course in Naval Certification
Online 300-hour course in IMO regulations for naval certification. 6 modules covering SOLAS 1974 (safety of life at sea), MARPOL 73/78 (prevention of pollution from ships)…
More in Electromobility, Batteries & Hydrogen
All Electromobility, Batteries & Hydrogen programmes → · How to apply · Fees & financing · Scholarships