CDPO/BR Training
Certified Data Protection Officer/Brazil training teaches in-depth knowledge of the General Law for the Protection of Personal Data — or LGPD — and principles for managing data protection programs. The training curriculum consists of two major components: LGPD training and Privacy Program Management training, aligned to the CIPM.
The CDPO/BR package includes LGPD training, the CIPM training textbook and the LGPD and CIPM exams. It is provided by the IAPP’s Official Training Partners.
Note: All training components are offered in Brazilian Portuguese.
Start training today
CDPO/BR training is offered exclusively by IAPP Official Training Partners.

Why train?
Learn how to perform all the functions of a DPO required by the LGPD, such as responding to requests from data subjects, adopting data protection measures and training teams.
Who should train?
Data protection professionals in Brazil who are interested in pursuing a DPO role.
Course curriculum
This course includes all necessary training to pass the two-part CDPO/BR certification and addresses topics covered on the CIPM certification exam and LGPD exam. All components are offered in Brazilian Portuguese.
CIPM training teaches a process for conceptualizing, designing, building and operating a data privacy management program, including structuring data protection teams, developing and implementing system frameworks and measuring performance.
- Identify privacy program manager responsibilities.
- Manage risk throughout the data life cycle.
- Create a program framework.
- Evaluate privacy technology vendors.
- Understand governance, risk management, auditing and compliance.
- Comprehend key global privacy and data protection laws, regulations and standards.
- Comply with cross-border data transfer regulations.
- Respond to data subject requests.
- Map and inventory data.
- Use privacy impact assessments and data protection impact assessments.
- Accommodate privacy-related human resources concerns.
- Develop policies for privacy, information security, acceptable use, data retention and destruction.
- Understand the benefits inherent in proper privacy and data protection training.
- Establish data protection training and awareness programs.
- Implement and evaluate security, access and technical privacy controls.
- Adopt privacy-by-design practices.
- Distinguish privacy and security incidents from breaches.
- Detect, investigate, report and recover from privacy and security breaches.
- Know your audience.
- Examine four types of metrics.
- Audit a privacy program in five phases.
The LGPD curriculum is a thorough survey of Brazilian data protection law.
- Explain the historical and legal context of data protection in Brazil.
- Identify the principles and scope of the LGPD.
- Differentiate between regular and sensitive personal information.
- Describe the rights of data subjects.
- Understand the obligations of controllers and operators.
- Explain enforcement mechanisms, sanctions and the role of regulatory bodies.
- Explain international data transfer methods.
- Understand aspects of sectoral laws regarding data protection.
- Develop strategies for compliance with overlapping laws and sectoral requirements.
Pick your training format
The IAPP provides flexible and modern online learning experiences. Choose from online and live online training.
Online
Learn at your own pace with online training modules that present content from highly experienced instructors through video, audio, text and interactive quizzes.
Live online
Train from any location through a virtual classroom on your computer and experience the same real-time back-and-forth exchange of ideas of a physical environment.
Beware of unauthorized trainers: Unauthorized trainers often guarantee customers will pass the exam. They may also claim to be authorized by the IAPP, and/or use the IAPP’s logo and seal. To see if a trainer is authorized, view our list of global IAPP Official Training Partners.
Become an IAPP member
An annual membership connects you with the professionals, tools and resources you need to navigate today's complex digital responsibility challenges.