GDPR Article 25 Privacy-By-Design Review for a HealthTech API
Overview
What this challenge is about.
Score GDPR compliance for a 42-endpoint HealthTech API, propose prioritized fixes, and deliver a DPO-ready report to earn your verifiable certificate.
The scenario
The scale-up (EUR 45M ARR, 1,800 clinic customers across 9 EU countries) is in the middle of a Dutch DPA inquiry on a competitor — every new API is under scrutiny.
The Brief
What you'll do, and what you'll demonstrate.
Conduct a GDPR Article 25 review of a 42-endpoint patient-facing API and produce a prioritized fix list the DPO will sign off.
Earning criteria — what you'll demonstrate
- Apply GDPR Article 25 principles to a real API specification
- Differentiate data-minimization fixes from purpose-limitation fixes
- Map gaps to EDPB Guidelines so the DPO can defend the analysis
- Prioritize privacy fixes against engineering effort honestly
Program Fit
Where this fits in your program.
Sharpens the same skills your degree expects you to demonstrate.
Privacy-Enhancing Technologies
Master · Security
Strong alignment
This challenge maps to Privacy-Enhancing Technologies at the Master level. It sharpens the same practical skills your coursework expects — but in a real industry context with actual constraints and deliverables.
Skills
Skills you'll demonstrate.
Each one shows up on your verified credential.
- Gdpr
Apply gdpr to solve real industry problems and demonstrate production-level capability.
- Privacy By Design
Apply privacy by design to solve real industry problems and demonstrate production-level capability.
- Api Design
Design RESTful and GraphQL APIs that are intuitive, consistent, and well-documented.
- Privacy Engineering
Apply privacy engineering to solve real industry problems and demonstrate production-level capability.
- Risk Classification
Apply risk classification to solve real industry problems and demonstrate production-level capability.
- Audit
Apply audit to solve real industry problems and demonstrate production-level capability.
Careers
Career paths this challenge builds toward
Completing this challenge demonstrates skills that transfer directly to these roles: