IntermediateSecurity trackDE-CP-29

DSGVO Record of Processing Activities (VVT) Builder

Internship role: Werkstudent:in Datenschutz. A web tool that captures processing activities, legal bases and retention periods and exports the Art. 30 register; validated with a Datenschutzbeauftragter review checklist.

10 Guided Steps480h Internship TierSubmit: GitHub repo or evidence pack + live demo / report + README + milestone logbookVerified CertificateAI Rubric Graded

Program Overview

What you submit

GitHub repo or evidence pack + live demo / report + README + milestone logbook

Stack: TypeScript, Next.js, PostgreSQL, Art. 30 GDPR schema

How it is graded

Scope & method20
Written scope and rules of engagement, and a method that follows a named framework (OWASP, NIST, MITRE ATT&CK).
Findings quality30
Each finding has steps to reproduce, evidence, a severity rating with reasons, and affected assets.
Remediation20
Fixes are specific, ranked by risk, and at least one is shown working.
Evidence & files15
Logs, screenshots, scripts or configs that a reviewer can check.
Report for a manager15
A one-page summary a non-technical manager can act on.

Pass 60% · Merit 75% · Distinction 90%

Learning Outcomes

480-hour Germany programme. Every German company with more than 20 employees handling personal data must keep a VVT

small firms still do it in spreadsheets.

Target Audience

Engineering Students

Diploma, B.Tech, B.E., BCA, MCA, or M.Tech students seeking practical experience.

Aspiring Developers

Developers who want to build proof-of-work capstone projects for tech resumes.

Job Seekers

Graduates looking for AI-evaluated code review & verified industry credentials.