Course on Data Protection Regulations in Insurance
Online 300-hour course in data protection regulations in insurance. 6 modules covering Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD) and OneTrust. Assigned tutor and open enrolment.
Course on Data Protection Regulations in Insurance — studying from New Zealand
New Zealand's insurance and financial services sector is concentrated in Auckland and Wellington, with a strong focus on general insurance, life insurance and risk management. Natural hazard risk, particularly from earthquakes, is a major consideration, and the Earthquake Commission provides residential natural disaster cover. Actuarial and risk data professionals work for insurers, reinsurers, regulators and consultancies, with oversight from the Reserve Bank of New Zealand and the Financial Markets Authority.
Fees for New Zealand: NZ$1,280 (New Zealand dollar), with instalments and employer sponsorship available.
Relevant bodies in New Zealand
Typical roles
Questions from New Zealand
Which New Zealand bodies recognise actuarial and risk qualifications?
The Actuarial Society of New Zealand and the New Zealand Institute of Actuaries work alongside international bodies such as the Institute and Faculty of Actuaries. Membership and professional credentials in these fields are set by those bodies, not by private providers. SEIUM's qualifications are private and not accredited by any national body, so their standing depends on how your employer or the relevant body assesses them.
Do insurers and financial firms in New Zealand hire people with data and risk skills?
New Zealand's insurance, banking and government sectors do employ people in risk, pricing and data analysis, and the Reserve Bank and insurers both draw on these skills. Hiring usually depends on demonstrated technical ability and professional credentials. A SEIUM qualification can support your application, but whether it is valued is up to each employer.
How is the programme delivered and paid for?
The programme is 100% online and taught in English, so no student visa is needed to study from New Zealand. You are assigned a technical tutor and complete a final project. Fees are payable in instalments, and employer sponsorship is possible. Time commitment varies by programme, from 300 hours for specialist courses to 1,900 hours for master's programmes.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Apply data protection principles to the insurance lifecycle.
Prepare the record of processing activities and the mandatory documentation.
Manage the exercise of data subjects' rights.
Analyse specific processing such as health data, telematics and shared files.
Carry out a data protection impact assessment.
Manage security breaches and their notification to the authority.
Design a privacy compliance plan for an insurer.
Who it's for
- Data protection officer looking to specialise in Data Protection Regulations in Insurance.
- Privacy consultant in insurance looking to specialise in Data Protection Regulations in Insurance.
- Data protection auditor looking to specialise in Data Protection Regulations in Insurance.
- Information security manager looking to specialise in Data Protection Regulations in Insurance.
- Regulatory compliance analyst looking to specialise in Data Protection Regulations in Insurance.
- Privacy lawyer looking to specialise in Data Protection Regulations in Insurance.
- Engineering or science graduates seeking to enter insurers.
What you'll work with
- Regulation (EU) 2016/679 (GDPR)
- Organic Law 3/2018 (LOPDGDD)
- Law 20/2015 (LOSSEAR, art. 99 on personal data)
- EDPB Guidelines 01/2020 (connected vehicles)
- Directive 2002/58/EC (electronic privacy)
- ISO/IEC 27701 (privacy management)
6 modules · 300 h
1.1Data processed in the insurance lifecycle1.2Controller and processor1.3Processing principles1.4Legal bases applicable to the sector1.5Special categories of data1.6Health data and its regime1.7Data of injured third parties1.8Sector vocabulary and acronyms1.9Supervisory authority and its criteria1.10Exercise: inventory of processing activities of an entity
2.1Record of processing activities2.2Information to data subjects2.3Consent management where applicable2.4Data protection impact assessment2.5Data protection officer2.6Contracts with processors2.7International transfers2.8Security measures and their justification2.9Retention and erasure2.10Practice: drafting a record of processing activities
3.1Access, rectification and erasure3.2Objection and restriction of processing3.3Data portability3.4Automated decisions and profiling3.5Internal procedure for handling rights requests3.6Deadlines and form of response3.7Identification of the applicant3.8Reasoned refusal and its limits3.9Complaints to the authority3.10Practice: procedure for handling rights requests
4.1Underwriting and health data4.2Telematics and driving data4.3Fraud prevention and shared files4.4CCTV and expert assessment4.5Marketing and commercial communications4.6Transfers between group entities4.7Biometric data and its use4.8Artificial intelligence and data protection4.9Anonymisation and pseudonymisation4.10Practice: lawfulness analysis of a processing activity
5.1Detection and assessment of a breach5.2Notification to the authority and affected persons5.3Incident documentation5.4Compliance audit5.5Data protection indicators5.6Training and awareness5.7Privacy by design5.8Relationship with information security5.9Penalties and their prevention5.10Practice: breach management protocol
6.1Choice of entity and scope6.2Inventory of processing activities6.3Lawfulness and legal bases analysis6.4Impact assessment of a processing activity6.5Procedure for rights and breaches6.6Security measures plan6.7Training and culture plan6.8Indicators and audit6.9Programme report6.10Project defence
How you'll learn
100 % online training on the SEIUM campus, with downloadable material, recorded classes and assigned technical tutor. No fixed timetables: the learner progresses at their own pace within the intake, which makes it compatible with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is OneTrust, PILAR (risk analysis), Gestiona EIPD tool (AEPD), advanced Excel, in free, academic or evaluation versions. Tests are studied on real data protection impact assessment procedures, breach management simulations and record of processing activities audits. Assessment is continuous per module plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Apply data protection principles to the insurance lifecycle.
Prepare the record of processing activities and the mandatory documentation.
Manage the exercise of data subjects' rights.
Analyse specific processing such as health data, telematics and shared files.
Carry out a data protection impact assessment.
Where this takes you
Requirements
- No prior degree required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient level of Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 300 hours in total, spread over 3 to 5 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
The course works with OneTrust, PILAR (risk analysis), Gestiona EIPD tool (AEPD), advanced Excel. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An own SEIUM diploma upon passing the continuous assessment and the integrative project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area are credited towards the higher programme. Check the recognition policy when you enrol.
Related programmes
Course in Satellite Data Analytics for Catastrophic Risks
Online 300-hour course in satellite data analytics for catastrophic risks. 6 modules covering Directive 2007/2/EC (INSPIRE), ISO 19115 (geographic metadata) and Google Earth Engine. Assigned tutor…
Course on Emerging Regulations in Safe Mobility
Online course of 300 h in emerging regulations in safe mobility. 6 modules covering Regulation (EU) 2019/2144 (general vehicle safety), Directive (EU) 2019/1936 (road infrastructure safety…
Course in Digital Tools for Claims Management
Online 300 h course in digital tools for claims management. 6 modules covering Regulation (EU) 2022/2554 (DORA), Regulation (EU) 2016/679 (GDPR) and Guidewire ClaimCenter. Assigned tutor…
More in Insurance, Risk & Actuarial Data
All Insurance, Risk & Actuarial Data programmes → · How to apply · Fees & financing · Scholarships