# Data Protection & Privacy Certificate Program (Self-Paced)

Canonical URL: <https://www.graduateschool.edu/certificates/data-protection-privacy-certificate-self-paced>

## Overview

Sensitive information in federal work is governed by three separate sets of rules, and this program covers all of them. Privacy and PII/PHI Protection Awareness takes on the Privacy Act of 1974, the line between ordinary PII, sensitive PII, and protected health information, and the first hour after a suspected breach. CUI Handling and Data Classification moves to the CUI Registry, CUI Basic versus CUI Specified, assembling and placing markings, and safe storage, transmission, and destruction. Records and Information Governance finishes at the intermediate level with what counts as a federal record, how retention schedules set disposition, why an unscheduled record cannot lawfully be destroyed, and how a litigation hold overrides the schedule.

What makes the three work as a program is that the overlap was cut rather than repeated. The records course does not re-teach privacy, FOIA, or CUI; it shows how one record can carry several obligations at once and has learners practice deciding which one governs. The program also reaches material most compliance training leaves out — protected health information where non-clinical staff actually meet it, in occupational health and workers' compensation files; chat and collaboration platforms as a source of federal records; and current government-wide expectations for using CUI with AI tools. It is written for federal employees, contractors, and detailees who handle sensitive information as part of the job, and assumes no prior background.

## What you'll learn

- Explain the Privacy Act of 1974 and the Fair Information Practice Principles, and distinguish ordinary PII from sensitive PII and from protected health information across HR, payroll, travel, and shared-drive contexts
- Apply the administrative, physical, and technical safeguards required for sensitive information, and work a suspected privacy incident from discovery through reporting and remediation
- Explain what CUI is, how it differs from classified and public information, and how to check a category in the CUI Registry as CUI Basic or CUI Specified
- Assemble banner and portion markings, and store, transmit, destroy, and sanitize CUI by approved methods, including during remote work and travel
- Identify current government-wide expectations for using CUI with AI tools
- Define a federal record, separate it from convenience copies, drafts, and personal papers, and recognize when email, chat, and collaboration-platform messages qualify
- Explain how General Records Schedules set retention, why an unscheduled record cannot lawfully be destroyed, how a litigation hold or FOIA request suspends disposition, and what to report after unauthorized destruction
- Determine which obligation governs when privacy, CUI, records, and FOIA requirements apply to the same document at once

## Curriculum
1. **Privacy and PII/PHI Protection Awareness Course (Self-Paced)**
2. **CUI Handling and Data Classification Course (Self-Paced)**
3. **Records and Information Governance Course (Self-Paced)**

## Instructors

### Wes Bryan — Instructor

Wes Bryan resides in Gainesville, Florida, and has built his career around technology, education, and helping others understand complex subjects. He values continuous learning, clear communication, and practical problem-solving. Outside of work, Wesley enjoys running, hiking, fishing, and spending time outdoors. He also has a strong interest in music and literature, enjoys reading both fiction and nonfiction, as well as playing guitar.

### Chuck Moore — Instructor

With more than 25 years of experience in IT and cybersecurity, Chuck has built a career on a strong foundation in security, networking, help desk operations, and technical training. He has helped organizations strengthen their security posture by identifying vulnerabilities, conducting threat assessments, implementing security controls, and ensuring compliance with industry standards. Combining extensive technical expertise with a passion for education, Chuck equips professionals with the knowledge and practical skills needed to recognize risks and respond effectively.

## Pricing

**Tuition:** $1649