Privacy Risk Assessments for AI: CCPA and GDPR Compliance

Build in-demand skills with a full year of Coursera Plus, now $239. Save now.

Privacy Risk Assessments for AI: CCPA and GDPR Compliance

This course is part of Data Privacy and AI Law: Compliance for Non-Lawyers Specialization

Instructor: Ken Suh

Included with Learn more

2 modules

Gain insight into a topic and learn the fundamentals.

Beginner level

Recommended experience

7 hours to complete

Flexible schedule

Learn at your own pace

2 modules

Gain insight into a topic and learn the fundamentals.

Beginner level

Recommended experience

7 hours to complete

Flexible schedule

Learn at your own pace

What you'll learn

Analyze how AI affects de-identification and use sample policies and templates to document compliance for AI projects.
Evaluate CCPA risk assessments, GDPR risk management systems, and data protection impact assessments for AI systems.
Apply CCPA and GDPR data minimization and proportionality rules to projects that use personal data with AI.

Details to know

Shareable certificate

Add to your LinkedIn profile

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

logos of Petrobras, TATA, Danone, Capgemini, P&G and L'Oreal

Build your subject-matter expertise

This course is part of the Data Privacy and AI Law: Compliance for Non-Lawyers Specialization

When you enroll in this course, you'll also be enrolled in this Specialization.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate

There are 2 modules in this course

This course is for technical, business, risk, and compliance professionals who work with counsel on privacy and AI and need to turn legal requirements into documented practices. You will learn how data minimization, purpose limitation, and proportionality work under the CCPA and GDPR, and the open questions they raise for training and using AI systems. You will study CCPA risk assessments, the GDPR’s risk management system for high-risk AI, and data protection impact assessments, including what each must document and who must sign off. You will see how AI changes the exceptions for de-identified and aggregate data. You will also review sample AI policy, project intake, vendor fact sheet, and impact assessment templates that show how regulatory requirements become working documents.

You will learn how the CCPA and GDPR apply data minimization, purpose limitation, and proportionality, including the reasonable expectations of consumers, and the open questions these rules raise when personal data is used to train or operate AI systems. You will also learn what a CCPA risk assessment must document, including the specific purpose, the categories of personal information, the benefits to consumers, the business, other stakeholders, and the public, the negative impacts and safeguards, and the review and attestation required of the person who signs it. You will then learn how to turn these requirements into working documents by reviewing a sample AI policy, an AI project intake form, and a vendor fact sheet, including prohibited uses, defined roles, testing plans, and vendor documentation.

What's included

4 videos1 reading3 assignments

4 videosTotal 59 minutes

Data Minimization and Risk Assessment Regulations19 minutes
AI Data, Privacy, and Governance Frameworks15 minutes
Real-World AI Governance & Policy Resources24 minutes
A Message on Your Professional Development Paths 1 minute

1 readingTotal 2 minutes

Now Build Toward a Credential from Illinois Law2 minutes

3 assignmentsTotal 90 minutes

Knowledge Check: Data Minimization and Risk Assessment Regulations30 minutes
Knowledge Check: AI Data, Privacy, and Governance Frameworks30 minutes
Knowledge Check: Real-World AI Governance & Policy Resources30 minutes

You will learn what a CCPA risk assessment for AI must document, including purpose, categories of personal information, the logic and assumptions of automated decision-making technology, benefits and negative impacts, safeguards, and who reviewed, approved, and attested to it, and how the GDPR’s risk management system for high-risk AI systems works as a continuous, tested process. You will also learn what a GDPR data protection impact assessment requires, how a sample template walks through the processing, its context, necessity and proportionality, risks, and mitigation, and how the role of the data protection officer differs from U.S. practice. You will then learn how AI changes the CCPA and GDPR exceptions for de-identified and aggregate data, and why businesses must reassess whether data can still be linked to a person.

What's included

8 videos1 reading8 assignments

8 videosTotal 59 minutes

CCPA-Goals of a Risk Assessment5 minutes
CCPA-Risk Assessment Requirements11 minutes
CCPA and GDPR Standards9 minutes
GDPR- Data Protection Impact Assessments8 minutes
GDPR - Data Anonymization/De-Identification6 minutes
Data Protection Impact Assessment Walkthrough12 minutes
Privacy Policy Walkthrough7 minutes
Congratulations and Next Steps2 minutes

1 readingTotal 2 minutes

Now Build Toward a Credential from Illinois Law 2 minutes

8 assignmentsTotal 211 minutes

Content Confirmation1 minute
Knowledge Check: CCPA-Goals of a Risk Assessment30 minutes
Knowledge Check: CCPA-Risk Assessment Requirements30 minutes
Knowledge Check: CCPA and GDPR Standards30 minutes
Knowledge Check: GDPR- Data Protection Impact Assessments30 minutes
Knowledge Check: GDPR - Data Anonymization/De-Identification30 minutes
Knowledge Check: Data Protection Impact Assessment Walkthrough30 minutes
Knowledge Check: Privacy Policy Walkthrough30 minutes

Earn a career certificate

Add this credential to your LinkedIn profile, resume, or CV. Share it on social media and in your performance review.

Instructor

Ken Suh

University of Illinois Urbana-Champaign

2 Courses3 learners

Offered by

University of Illinois Urbana-Champaign

Explore more from Law

Coursera
Protect Privacy & Compliance
Course
Packt
AI Governance and Privacy Professional Certification (AIGP)
Course
Coursera
Data Privacy, Ethics, and Responsible AI
Specialization
Microsoft
Privacy and Secure AI Operations
Course

Why people choose Coursera for their career

Felipe M.

Learner since 2018

"To be able to take courses at my own pace and rhythm has been an amazing experience. I can learn whenever it fits my schedule and mood."

Jennifer J.

Learner since 2020

"I directly applied the concepts and skills I learned from my courses to an exciting new project at work."

Larry W.

Learner since 2021

"When I need courses on topics that my university doesn't offer, Coursera is one of the best places to go."

Chaitanya A.

"Learning isn't just about being better at your job: it's so much more than that. Coursera allows me to learn without limits."

What brings you to Coursera today?

Start my career

Change my career

Grow in my current role

Explore topics outside of work

Give yourself skills that last, now $239
Save now
Gift your team new skills
Save 40% now

Frequently asked questions

To access course materials, assignments, and earn a Certificate, you'll need to purchase the Certificate experience when you enroll in a course. Eligible learners may also have the option to start with a Free Trial. Some courses may also offer a Full Course, No Certificate option. This lets you access course materials, submit required assessments, and receive a final grade, but you won't be able to earn or purchase a Certificate.

When you enroll in the course, you get access to all of the courses in the Specialization, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile.

Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.