AIS102 · Data Privacy Principles (LGPD, GDPR and Beyond)
About Course
Learn the core principles of modern data privacy law across the GDPR, US state privacy laws and Brazil's LGPD, and apply them to everyday business processes and AI use cases.
Who it is for
Managers, operations and HR staff, marketers and small-business owners who handle personal data and want to use it lawfully and responsibly.
Prerequisites
AIS101 is recommended but not required; no legal background is needed.
What you will be able to do
- Explain the core privacy principles shared by the GDPR, US state laws and the LGPD
- Identify personal and sensitive data and the lawful bases or notices required to process it
- Map a data flow and create a record of processing activities for a business process
- Recognize when a data protection impact assessment is needed, especially for AI use cases
Lessons
- Lesson 1 · Personal data and the core privacy principles
- Lesson 2 · GDPR, US state laws and the LGPD compared
- Lesson 3 · Records, impact assessments and privacy in AI
- Lesson 4 · Lab and assignment
Lab: Map data flows and record processing for an AI use case
You map how customer data flows through a fictional online bakery that wants to use an AI assistant to answer customer emails. You then complete a record of processing activities and a short impact-assessment screening that shows which privacy principles apply at each step.
Free tools: draw.io (diagrams.net, free in the browser) and Google Sheets or LibreOffice Calc
Assessed assignment
Produce a privacy review for one business process that uses or plans to use AI, such as resume screening, customer support or marketing personalization. Include a data-flow diagram, a record of processing, the applicable laws (choose GDPR, one US state law and the LGPD), the lawful basis or notice for each purpose, data subject rights handling and an impact-assessment screening with your conclusion. Note clearly that the review is educational and not legal advice.
| Criterion | Weight | What excellent work looks like |
|---|---|---|
| Data mapping | 25% | The diagram shows sources, systems, vendors, transfers and retention for all personal data in scope. |
| Legal analysis | 30% | Principles, lawful bases or notices and sensitive data rules are correctly applied for each law chosen. |
| Rights and safeguards | 25% | Processes for access, deletion, correction and opt-out are realistic, and safeguards match the risks. |
| Impact-assessment screening | 20% | The screening uses clear criteria and reaches a justified conclusion about whether a full assessment is needed. |
Portfolio piece
A privacy review with data-flow map, record of processing and impact-assessment screening for an AI-enabled process.
Next step
Continue with AIS103 · Securing AI Systems and LLM Applications · 6 hours · $42.00
Course Content
AIS102 · Data Privacy Principles (LGPD, GDPR and Beyond) (4 h)
-
Lesson 1 · Personal data and the core privacy principles
-
Lesson 2 · GDPR, US state laws and the LGPD compared
-
Lesson 3 · Records, impact assessments and privacy in AI
-
Lesson 4 · Lab and assignment
-
AIS102 Assessment · Data Privacy Principles (LGPD, GDPR and Beyond)
