Perform a search on the site.

Your currency

GDPR and Business Process Management (BPM)

Your processes need to be understood before they can be improved. Model activities, exchanges and responsibilities to make friction points visible. Develop a BPM approach that supports dialogue between business teams and those responsible for transforming how the organisation works.

Program PDF
3 days 21 hours
GDPR01FR Code

Presentation

The General Data Protection Regulation (GDPR) is a European regulation through which the European Parliament, the Council of the European Union and the European Commission seek to strengthen and standardise data protection across EU countries, while also controlling transfers outside the Union. Its main objectives are to give citizens control over their personal information and unify the regulatory framework for multinational businesses.

Adopted in April 2016, it will enter into force on 25 May 2018 after a two-year transition period. Unlike directives, it does not need to be incorporated into national legislation and is directly applicable.

The GDPR provides for penalties of up to €20 million or 4% of annual worldwide turnover, whichever is higher.

The GDPR stipulates that companies must appoint a Data Protection Officer (DPO), a person responsible for data protection who must not also be the Chief Information Officer (CIO) and is not the person accountable for the risk incurred.

This European regulation affects all companies serving customers and users located in the EU, even temporarily. What matters is not where a company is headquartered, but the personal data it processes.

Objectives

This course aims to help you:

  • understand the impact and value of a process-based view in the context of the European GDPR;
  • understand how Business Process Management (BPM) contributes to protecting companies' employee data;
  • discover the BPMN (Business Process Model & Notation) standard for describing processes in a structured, effective way;
  • learn a methodology for introducing a process-based approach within a company, implemented in stages to reflect the complexity of business environments;
  • understand the relationship between GDPR and cybersecurity.
Last update: 23/09/2026