In this masterclass you will:
-
get a full walkthrough of CJEU case-law on personal data and special categories of data;
-
discover the correct interpretation of pseudonymous and anonymous data, so you can confidently assess if GDPR applies or not;
-
get answers to your questions and connect with likeminded professionals who use smart ways to stay ahead of developments.
GDPR case-law is moving fast.
Fundamental definitions like personal data are being revisited, which can change how we approach compliance in practice
The recent CJEU SRB Decision has been the talk of the town among privacy professionals and it feels like we're back to school. But there' also NADA, IAB Europe, Breyer, Nowak, Scania, NVSC, and many more, all of which expand and clarify the concept in different directions.
Now more than ever we need to understand the history and context of the personal data concept, so we can bring clarity and efficiency in our projects.
Masterclass Agenda
The legal definition of personal data
Elements of Art. 4(1) GDPR, with focus on "identifiability"
Indirect personal data
How the concept has evolved from Directive 95/46 to GDPR to today
Special categories of personal data
-
General aspects through the lens of Case C-184/20
-
Health data
-
Biometric data
-
Consequences of data being special category
Pseudonymous and Anonymous Data
-
What they mean
-
When is data not personal?
-
Consequences of data (not) being personal
Practical aspects
-
Can data be personal only for one party in a transaction?
-
Can you process personal data by accident?
-
AdTech (cookies, unique identifiers)
-
Clinical trials (coded data)
-
...and more!
Good practices for privacy management
Recommendations, common mistakes, and more
Q&A / discussion
You get the chance to discuss your own questions and situations relevant for your activity.
What's included
Live online masterclass
Join me live on 26 November for a 3-hour session packed with analysis and examples, where you have the chance to ask your own questions. You have the option to only purchase the recording as well.
Recording & Materials
Get 6 months access to the recording, as well as the slides - for personal use only.
Case-Law Summaries
Receive a structured reference pack of summaries of the cases discussed. Delivered only with the live masterclass.
Meet Your Trainer
Andreea Lisievici Nevin
CIPP/E, CIPM, FIP, ECPC-B certified DPO
I’m a privacy & tech lawyer based in Sweden, and I’ve been working with EU data protection matters and their global effects for more than a decade. I teach privacy and data protection law at Maastricht University’s European Centre for Privacy and Cybersecurity and run PrivacyCraft, the boutique I founded in 2024, where I mentor privacy professionals and lead training programs focused on practical implementation.
Before returning to consulting in 2024, I spent several years in-house leading privacy compliance for Volvo Cars and Boeing’s Digital Aviation Services, and before that I worked as outside counsel advising on data protection from the early days of cloud computing. Seeing both sides of compliance, as controller and processor, and working in a global environment have shaped my pragmatic approach: privacy that works in real organisations, not just on paper.
I hold a law degree from the University of Bucharest, I also studied at Erasmus University Rotterdam, and I’m a Fellow of Information Privacy with certifications as CIPP/E and CIPM from the IAPP, as well as DPO certification from Maastricht University’s ECPC.
Key benefits
Learn from a recognised expert
My approach bridges legal precision with operational reality - so instead of abstract theory, you’ll get reasoning you can actually use to make confident calls in your daily work.
Case-law summaries
If you purchase the live masterclass, you’ll receive concise, structured summaries of every CJEU case discussed. Each summary highlights the key reasoning, how it reshaped the concept of personal data, and what it means in practice.
Completion certificate
You’ll receive a personalised digital certificate confirming your participation in the masterclass. Use this to document your continuing professional development.
Use it as CPE
Whether you’re maintaining your professional certifications or fulfilling mandatory training obligations under your national bar regulations, your completion certificate can be submitted as proof of ongoing professional development in data protection law.
Rewatch at your convenience
You’ll have access to the recording for 6 months after the session, so you can revisit the masterclass whenever you need.
Get reimbursed by your employer
You’ll receive an invoice with full company details, making it easy to submit for reimbursement or add this masterclass to your department’s training budget.
What people say about my teaching
Working with privacy and data protection has been life changing, all thanks to Andreea. She was my inspiration to dive into this field. Andreea has an incredible ability to translate the hardest and most abstract concepts into real-life application. Unlike other courses, I can always immediately apply the knowledge I gain.
Fernanda, Brazil
Andreea is a great trainer - very knowledgeable, eager to ensure all participants understand well the topic, and she uses a touch of humour to make the class extremely enjoyable. I highly recommend taking her masterclasses!
Pompilia, Romania
Andreea provided the best training that I have received since joining the privacy office. Everything was perfect, the slides, the pace, the explanations, clarifications, and her calm, confident and professional manner of communication.
Dan, USA
Andreea's course exceeded my expectations. Not only did I not get bored, but I wish it lasted longer.
Irina, Romania
This Masterclass brings an innovative approach to risk management. It provides a practical and useful approach to this topic, and I can revise the existing assessments bases on the knowledge acquired. I recommend it to everyone dealing with Risk assessments in this field.
Laura, European institution
The Masterclass helped me to understand how to conduct a proper risk assessment and what to consider acceptable/ unacceptable risks. The best thing is that Andreea’s teaching is practical and coherent. I would recommend this masterclass to other professionals who want to clarify what are the main aspects of risk assessment in privacy.
Anastasiia, Sweden
Book Your Spot
Recording only
149 EUR
✖ Live masterclass access
✖ Q&A
✔ Recording, excluding Q&A
✔ Slides
✖ Case-law summaries e-book
Live online & recording
199 EUR
✔ Live masterclass access
✔ Q&A
✔ Full recording
✔ Slides
✔ Case-law summaries e-book
Frequently Asked Questions
Still have questions? Contact me, I'm happy to help you.
The masterclass takes place on 26 November 2025, at 15:00 CET, and will last 3 hours. The session will be delivered online via Zoom.
It’s designed for privacy professionals, lawyers, and compliance specialists who already understand GDPR fundamentals but want deeper, case-law-based clarity on what counts as personal data especially given how the concept has evolved over time. If you often spend time researching interpretations or explaining them internally, this session is for you.
The masterclass is aimed at privacy professionals with a working knowledge of the GDPR - people who already navigate its key concepts and want to understand how courts and regulators interpret them in practice.
If you’re newer to privacy, you can still join and follow along. The session builds from legal definitions before moving into case-law analysis, so you’ll learn both the legal foundations and how they evolve through real decisions. It’s an excellent way to accelerate your learning curve and gain a more advanced understanding early on, especially as "personal data" is a fundamental concept.
No prior case-law expertise is required. You should already understand GDPR basics, but I’ll explain every judgment in context - what the court decided, why it matters, and how it changes interpretation in practice. The goal is to make complex reasoning accessible and directly usable, not to test what you already know.
Yes, we’ll have dedicated time for live questions. You can also submit questions in advance if you choose the recording-only option. Note also that if you purchase the recording only, the Q&A will be edited out and instead you will receive a transcript.
You could - but it would take weeks of reading judgments, guidance, and commentary to reach the same level of clarity. I’ve already done that work for you. In this masterclass, you get the distilled reasoning, practical interpretations, and case-law patterns that normally take years of experience to internalise, all in one focused session.
You’ll get 6 months of access to the recording, the presentation slides, and concise case-law summaries covering every decision discussed. You’ll also receive a personalised completion certificate, which you can use for professional development or CPE purposes. All materials are delivered digitally the day after the live session.
No. The Terms and Conditions specify that the masterclass and its materials are only to be used by the individual buyer for their own training, and cannot be further used - neither given to another person nor used to train other people. Please make sure to read the Terms in full.
Yes. Most professional associations and bar authorities accept independent, topic-relevant legal or privacy training as CPE. While the masterclass is not pre-approved a certain number of credits, you can submit the certificate of attendance as proof and request the number of credits specified in the rules of your professional body.
Internal rules on professional development vary, so start by checking what applies in your organisation. Most of the times you can use the invoice and the certificate of attendance to expense the cost.
Absolutely - there’s a discount for three or more participants from the same organisation. Contact me for group registration pricing or for a customised team session.
Yes, because the GDPR applies outside of the EU and therefore if the law is relevant in your activity then the insights from the masterclass will be as well.
