Course

Data Ethics and Protection: Law, Rights and Responsible Practice

Learn what data protection law requires, the rights people have over their data, and how to work with data responsibly, taught through real cases, real fines and the laws of Nigeria, Europe and beyond.

Before you begin

Recommended first: How Data Actually Works.

This is guidance, not a gate. You can enrol and start whenever you like.

Syllabus

The core principles of data protection

Lawful, fair and transparent Paid
Only what you need, only for why you said Paid
Keep it correct, and do not keep it forever Paid
Protect it, and be able to prove it Paid
The six legal reasons, and real consent Paid
Assignment: audit KiraPay against the principles Paid
Module 2 test Paid
Check yourself: core principles Paid

The rights people have over their data

The right to know, and the right to see Paid
Put it right, or make it gone Paid
Take it with you, or tell them to stop Paid
The right not to be judged by a machine alone Paid
Handling a request, with the clock running Paid
Assignment: handle Ada's requests Paid
Module 3 test Paid
Check yourself: the rights of data subjects Paid

Nigeria in depth: the NDPA, the NDPC and the GAID

From the NDPR to the NDPA Paid
The NDPC, and the people who help you comply Paid
Who must register, and the duties that follow Paid
What it costs, and who has already paid Paid
Rights under the NDPA, and how far it reaches Paid
Assignment: bring KiraPay into NDPA compliance Paid
Module 4 test Paid
Check yourself: data protection in Nigeria Paid

Europe in depth: the GDPR

The GDPR: shape and reach Paid
Moving data out of Europe, and the Schrems cases Paid
Think before you process: DPIAs and records Paid
The 72-hour rule Paid
What breaking the GDPR costs Paid
Assignment: map KiraPay's GDPR duties Paid
Module 5 test Paid
Check yourself: the GDPR Paid

The wider world: a comparison of regimes

The United Kingdom after Brexit Paid
The United States, a patchwork Paid
Brazil and the LGPD Paid
Africa beyond Nigeria: South Africa and Kenya Paid
Asia's giants: China and India Paid
Canada, and how to read any data law fast Paid
Assignment: advise KiraPay on two new markets Paid
Module 6 test Paid
Check yourself: the wider world Paid

Data breaches and security for the non-engineer

What a data breach actually is Paid
How breaches really happen Paid
The simple defences that stop most breaches Paid
The human factor and a security culture Paid
When a breach happens: the response playbook Paid
Everyday security habits for the analyst Paid
Assignment: handle a KiraPay breach end to end Paid
Module 7 test Paid
Check yourself: breaches and security Paid

Algorithms, AI and automated decisions

What an algorithm and an automated decision are Paid
Bias in, bias out Paid
The right not to be judged by machine alone Paid
When it goes wrong at scale: a real case Paid
Fairness, transparency and explainability Paid
Governing AI responsibly Paid
Assignment: audit KiraPay's loan-scoring engine Paid
Module 8 test Paid
Check yourself: algorithms and AI Paid

Ethics in practice

Legal is not the same as right Paid
Consent as respect, and dark patterns Paid
Power, and the idea of data justice Paid
The ethics of re-identification Paid
A method for making an ethical decision Paid
The professional's responsibility Paid
Assignment: resolve an ethical dilemma Paid
Module 9 test Paid
Check yourself: ethics in practice Paid

Building compliance, and your career

Building a data protection programme Paid
Privacy by design and by default Paid
Your career in data protection Paid
Capstone project: a compliance starter pack Paid
Course final exam Paid