Current legislation in the field of data protection and privacy is determined by the European General Data Protection Regulation (GDPR) and its implementation in national legislation of EU member states. In this module, the participants learn the basic concepts of current privacy legislation, the principles, the different (privacy) roles in an organization, the most important rights and obligations of the GDPR.