Master class Privacy Assessment Framework
Is your educational institution in control of personal data protection and do you meet the standards? Discover in this master class how you can use the Privacy Assessment Framework to effectively organise, maintain and evaluate all matters concerning privacy. You will also learn how to measure where you stand on data protection every year.

- SURF office in Utrecht
The Privacy Assessment Framework helps institutions implement the right measures to adequately protect personal data. With this assessment framework, you get concrete insights, guidelines and follow-up steps to strengthen data protection. Institutions can purposefully evaluate and optimise their processes, activities and measures, leading to better data protection.
Reliable guide
The Assessment Framework is a reliable guide for institutions striving for a strong data protection culture and compliance with the AVG. By implementing and following the PDCA improvement cycle, you work consistently to identify risks, keep your processing register up to date, raise employee awareness and discover deficiencies that can be addressed. So you can use the framework for your Privacy Information Management System (PIMS).
The assessment framework is also used for the sector-wide privacy benchmark where you can compare as an institution (anonymously) where you stand compared to other institutions in the education sector.
For whom is this master class?
The Privacy Assessment Framework master class is aimed at privacy officers, coordinators, data protection officers, ISP advisers and (IT) auditors/controllers. This masterclass is also valuable for colleagues with information security/security tasks, because of the interfaces between information security and personal data protection.
Getting started with the Privacy Assessment Framework
Under the guidance of privacy consultant Erik van den Beld of Audittrail and Helma de Boer of SURF's Privacy Expertise Centre, you will work concretely with the assessment framework and the domains and statements that are part of it. This will allow you to quickly see how to use the framework in practice.
The participants are colleagues from the education sector. Using interactive working methods, you will have the opportunity to learn and become proficient in using and completing the Assessment Framework. We will also look at the maturity levels associated with it. There is ample opportunity for informal exchange/discussion, both during and after the master class.
Programme
During this master class, we will discuss all domains of the Assessment Framework with associated statements and scores. Below is the outline of the programme.
09.30 | Walk-in and introduction |
10.00 | General introduction of the Privacy Assessment Framework and its benchmark |
10.15 | Part I Introduction and discussion of the Privacy Assessment Framework; the Domains with statements |
11.15 | Short break |
11.30 |
Part II Privacy Assessment Framework; continued Domains, statements and associated maturity levels |
12.45 | Break + lunch |
13.45 |
Part III Getting started I - discussion and first (draft) interpretation of assessment framework (domains 1 to 3) |
15.15 | Short break |
15.30 |
Part IV Getting started II - treatment and (draft) interpretation of assessment framework (domains 4 to 7) |
17.30 | Afterwards, discussion during closing drinks |
Register
- Register for this master class no later than 27 August.
- The maximum number of participants is 15; if fewer than 10 participants, we will reschedule the master class.
- Registration is not optional; Please read the cancellation conditions for SURF meetings.
Costs
The cost is 250 euro per participant (excluding VAT), lunch and closing drinks are included. SURF will arrange registration for the masterclasses. The SURF registration system only accepts direct payment (iDeal or credit card). After completing your registration you will receive an e-mail as confirmation with the invoice attached.
Want to know more?
The Privacy Assessment Framework contains measures relevant to the security and continuity of corporate data and the privacy of staff and students within your institution. But how does such an Assessment Framework work in practice? Niels Dutij, Data Protection Officer at several mbo institutions, and Roos Roodnat, Data Protection Officer and Integral Security Officer at Utrecht University of Applied Sciences, talk about their experiences.
Sign up now Master class Privacy Assessment Framework
- SURF office in Utrecht