ICoBCAcademy

Privacy by Design for Credential Programmes

A data protection impact assessment, done properly.

  • Ability
  • L3 Enable
  • Practitioner
  • Security, privacy and data protection
  • ICB-P12
Start the courseSource on GitHub

Why this course

Wallet-based credentials make selective disclosure possible, so issuers must decide what to disclose and how. Larger programmes often need a DPIA anyway. Builds on F10.

What you will be able to do

  1. Carry out a data protection impact assessment for a credential programme.
  2. Minimise data in public credentials and evidence.
  3. Decide on selective disclosure, expiry and status mechanisms.
  4. Document processor agreements and transfers.

Modules

  1. The DPIA step by step
  2. Minimisation
  3. Selective disclosure options
  4. Privacy of status and revocation
  5. Contracts

Assessment

DPIA for a real or case programme.

Badge evidence: DPIA document.

Prerequisites: ICB-F10

Who it is for

  • Companies and employers
  • Education and providers
  • Associations and policy

Framework alignment

ICSFframeworkSECPskillL3levelAstage

Security, privacy and data protection (SECP, VRITE pillar Trustworthiness)

Related skills: Policy and regulatory navigation, Digital identity and wallets. About the framework

Use in your organisation

In corporate training

Workshop module for HR and learning technology owners. Badge aligns to ICSF SECP L3 (SFIA 4) and can be referenced in role profiles. Counts as skill evidence; competency on the job needs a V-series validation.

In education

Micro-credential of 6 h notional workload (about 0.2 ECTS), indicative EQF 5 to 6, assessed by assessed practical task with rubric. Stand-alone or elective unit.

EU micro-credential elements

Awarding body ICoBC e.V. or licensed issuer. Learning outcomes: see column. Notional workload: 6 h (about 0.2 ECTS). Level: ICSF L3, EQF 5 to 6 (indicative). Type of assessment: assessed practical task with rubric. Form of participation: In person or live online workshop with online pre-work. Type of quality assurance: ICoBC internal QA against VRITE. Prerequisites: ICB-F10.

Elements following the Council Recommendation of 16 June 2022 on a European approach to micro-credentials.

Quality and AI

Quality focus: VRITE Trustworthiness.

AI dimension: Includes AI processors in the DPIA.

Improve this course

The course is open on GitHub in LiaScript format under CC BY 4.0. View the source or read how to suggest a change.