2.1.1. Introduction: Legal Foundations, Special Categories of Data, and CNIL Guidelines
2.1.2. The Specifics of Consent – A Free, Specific, Informed, and Unambiguous Expression of Will
2.1.3. Specifics of consent – Demonstration and withdrawal
📝 Quiz #13
2.1.4. Specifics of consent – Consent of minors
2.1.5. Specifics of consent – Explicit consent
📝 Quiz #14
2.1.6. Use cases for consent: Trackers, electronic marketing, geolocation, credit card data
2.1.7. The performance of a contract to which the data subject is a party, or the fulfillment of pre-contractual measures at their request
2.1.8. Compliance with a legal obligation of the data controller
📝 Quiz #15
2.1.9. Protection of the vital interests of the data subject or a third party
2.1.10. Performance of a task carried out in the public interest by the data controller
2.1.11. Legitimate interests of the data controller or a third party
📝 Quiz No. 16

2.2.1. General rules regarding the exercise of data subjects’ rights
2.2.2. The data controller’s obligations regarding transparency and information
🔍 Case Study No. 1: PrivacyPolicy of a Website Selling Online Subscriptions
📝 Quiz No. 17
2.2.3. The right of access
2.2.4. The right to rectification
2.2.5. The right to erasure or “right to be forgotten”
2.2.6. The right to object
2.2.7. The right to restriction of processing
📝 Quiz #18
2.2.8. The right to data portability
2.2.9. The right not to be subject to a fully automated decision
2.2.10. Limitations on the exercise of rights specific to French domestic law
2.2.11. The right to determine the fate of personal data after death
📝 Quiz No. 19

2.3.1. The Relationship Between the Data Controller and the Data Processor – Selecting a Data Processor and Signing a DPA
🔍 Case Study No. 2: DPA Offered by a SaaS Recruitment Software Provider to Its Clients
2.3.2. Formalizing relationships between a processor and a subprocessor
🔍 Bonus: Analysis of the Commission’s standard contractual clauses – Relationship between a data controller and a processor
📝 Quiz No. 20
2.3.3. Relationships between non-joint data controllers and the signing of a CtoC Agreement
2.3.4. Relationships between joint data controllers and the signing of a “Joint Controller Agreement” (JCA)
2.3.5. Codes of conduct
2.3.6. Certification
📝 Quiz No. 21
2.3.7. International transfers – Concept – Mapping obligation
2.3.8. International Transfers – Adequacy Decisions – The Schrems II Ruling and the Data Privacy Framework
📝 Quiz #22
2.3.9. International Transfers – “Appropriate Safeguards”: BCRs, Standard Contractual Clauses, etc.
🔍 Bonus: Analysis of the Commission’s standard contractual clauses for the transfer of personal data
2.3.10. International transfers – Data transfer impact assessment (DTIA)
2.3.11. Transfers – Derogatory grounds
📝 Quiz No. 23