Design an LFPDPPP Compliance Program for Glow Natural MX
Overview
What this challenge is about.
Map data fields and LFPDPPP gaps for a cosmetics brand, draft a privacy notice and breach protocol, and earn your verifiable certificate.
The scenario
Glow Natural MX is a venture-backed direct-to-consumer cosmetics brand based in Mexico City that sells natural skincare online and ships across 12 Latin American markets, relying heavily on customer data for personalized marketing. As a private company processing personal (and likely sensitive) data of Mexican residents, it is squarely subject to the LFPDPPP and its regulator's enforcement.
The Brief
What you'll do, and what you'll demonstrate.
Design a prioritized, business-feasible LFPDPPP compliance program — including a revised privacy notice and breach protocol — for a fast-growing direct-to-consumer cosmetics startup whose current data practices are outdated and likely non-compliant.
Earning criteria — what you'll demonstrate
- Interpret core LFPDPPP obligations (privacy notice, consent, ARCO rights, security duties, breach notification) from the statute text
- Conduct a structured data-mapping and gap analysis against a real data inventory and documented practices
- Translate legal requirements into a prioritized, risk-ranked roadmap that fits real business constraints
- Draft compliant, plain-language privacy and incident-response documents for a non-legal audience
Program Fit
Where this fits in your program.
Sharpens the same skills your degree expects you to demonstrate.
Aligned coursework coming soon.
Skills
Skills you'll demonstrate.
Each one shows up on your verified credential.
- Data Privacy
Apply data privacy to solve real industry problems and demonstrate production-level capability.
- Lfpdppp
Apply lfpdppp to solve real industry problems and demonstrate production-level capability.
- Compliance
Apply compliance to solve real industry problems and demonstrate production-level capability.
- Policy Drafting
Apply policy drafting to solve real industry problems and demonstrate production-level capability.
- Latam Data Protection
Apply latam data protection to solve real industry problems and demonstrate production-level capability.
Careers
Career paths this challenge builds toward
Completing this challenge demonstrates skills that transfer directly to these roles:
Privacy & Compliance Analyst
This challenge mirrors the analyst's core loop: auditing how a business actually handles personal data, mapping it to the governing law, and proposing prioritized fixes — building the data-mapping and gap-analysis muscles employers expect on day one.
This challenge sharpens
- data-privacy
- lfpdppp
- compliance
Junior Data Protection Officer
Designing a privacy program, breach protocol, and ARCO-rights workflow for a regulated company is the foundational work of a DPO, bridging legal interpretation into operational policies a startup can run without specialist headcount.
This challenge sharpens
- data-privacy
- compliance
- policy-drafting
Legal Operations Associate
Turning statute and regulator guidance into a feasible, risk-ranked roadmap that respects business constraints is exactly the cross-functional translation legal-ops associates do between counsel and product or marketing teams.
This challenge sharpens
- latam-data-protection
- policy-drafting
- compliance