# Data Protection & Privacy Certificate Program

Canonical URL: <https://www.graduateschool.edu/certificates/data-protection-privacy-certificate>

## Overview

This certificate program covers the three sets of rules that govern sensitive information in federal work. Privacy and PII/PHI Protection Awareness works through the Privacy Act of 1974, the difference between ordinary PII, sensitive PII, and protected health information, and what to do in the first hour after a suspected breach. CUI Handling and Data Classification covers the CUI Registry, CUI Basic versus CUI Specified, assembling and placing banner and portion markings, and safe storage, transmission, and destruction. Records and Information Governance closes the program with what makes something a federal record, how retention schedules work, why an unscheduled record cannot lawfully be destroyed, and how litigation holds suspend disposition.

The three were built to be taken together. Where the subject matter overlapped, the material was removed rather than repeated, so the records course does not re-teach privacy, FOIA, or CUI — it explains how one record can carry several obligations at once and has learners practice deciding which applies. The program also covers ground most compliance training skips: protected health information as non-clinical staff actually meet it in occupational health and workers' compensation files, chat platforms as a source of federal records, and current government-wide expectations for using CUI with AI tools. It suits federal employees, contractors, and detailees who handle sensitive information routinely, and assumes no prior background.

## What you'll learn

- Explain the Privacy Act of 1974 and the Fair Information Practice Principles, and distinguish ordinary PII from sensitive PII and from protected health information across HR, payroll, travel, and shared-drive contexts
- Apply the administrative, physical, and technical safeguards required for sensitive information, and work a suspected privacy incident from discovery through reporting and remediation
- Explain what CUI is, how it differs from classified and public information, and how to check a category in the CUI Registry as CUI Basic or CUI Specified
- Assemble banner and portion markings, and store, transmit, destroy, and sanitize CUI by approved methods, including during remote work and travel
- Identify current government-wide expectations for using CUI with AI tools
- Define a federal record, separate it from convenience copies, drafts, and personal papers, and recognize when email, chat, and collaboration-platform messages qualify
- Explain how General Records Schedules set retention, why an unscheduled record cannot lawfully be destroyed, how a litigation hold or FOIA request suspends disposition, and what to report after unauthorized destruction
- Determine which obligation governs when privacy, CUI, records, and FOIA requirements apply to the same document at once

## Curriculum
1. **Privacy and PII/PHI Protection Awareness Course**
2. **CUI Handling and Data Classification Course**
3. **Records and Information Governance Course**

## Instructors

### Wes Bryan — Instructor

Wes Bryan resides in Gainesville, Florida, and has built his career around technology, education, and helping others understand complex subjects. He values continuous learning, clear communication, and practical problem-solving. Outside of work, Wesley enjoys running, hiking, fishing, and spending time outdoors. He also has a strong interest in music and literature, enjoys reading both fiction and nonfiction, as well as playing guitar.

### Chuck Moore — Instructor

With more than 25 years of experience in IT and cybersecurity, Chuck has built a career on a strong foundation in security, networking, help desk operations, and technical training. He has helped organizations strengthen their security posture by identifying vulnerabilities, conducting threat assessments, implementing security controls, and ensuring compliance with industry standards. Combining extensive technical expertise with a passion for education, Chuck equips professionals with the knowledge and practical skills needed to recognize risks and respond effectively.

## Pricing

**Tuition:** $1649