Chapter 12 — Practice portfolio and final review

Lesson map

Lesson 12 published. Map, example, EX056.

flowchart TD
  N0["Learning outcomes"]
  N1["12.1 Assembling the portfolio"]
  N2["12.2 Evidence of competence"]
  N3["12.3 Final review"]
  N4["12.4 Continuing development"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX056"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["12.1 Assembling the portfolio"]
  N2["12.2 Evidence of competence"]
  N3["12.3 Final review"]
  N4["12.4 Continuing development"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX056"]

[Learning outcomes]
    |
    v
[12.1 Assembling the portfolio]
    |
    v
[12.2 Evidence of competence]
    |
    v
[12.3 Final review]
    |
    v
[12.4 Continuing development]
    |
    v
[Worked example] --> [Exercise EX056]

Learning outcomes

You will (1) assemble a practice portfolio; (2) reflect on evidence of competence; (3) plan continuing development.

12.1 Assembling the portfolio

Marta assembles her portfolio from six months at Halden: the data map, the retention analysis, the access request workflow and log design, the verification register, the breach analysis, the client disability case, the quality troubleshooting and the redaction lab. Each item has a short cover note explaining the problem, what she did, the evidence and the outcome. She removes all real names and uses synthetic examples throughout, checking that no item could identify a Halden candidate or employee. Ms. Lin checks the anonymisation.

12.2 Evidence of competence

Ms. Lin reviews the portfolio against the course outcomes. Marta shows she can map processing, analyse retention, run rights workflows, verify controls, assess breaches, handle ethical tensions and communicate with managers. Ms. Lin points to two areas for growth: Marta's legal reasoning on background checks is still tentative, and her scripts depend on help. Marta accepts the feedback and notes that knowing the limits of her competence is part of professional practice, especially in a field where errors affect people. Honest limits matter.

12.3 Final review

In the final review meeting, Halden's managing director confirms the changes remain in place: CV deletion runs nightly with warnings, the talent pool has been refreshed, access requests are logged centrally, printed interview notes have stopped and diversity data are stored separately. The data protection lead presents the verification register showing two quarters of results. Marta presents the remaining gaps, including background check contracts that need review and a networking-site integration that has not yet been assessed for Article 14 notices. Both gaps have owners.

12.4 Continuing development

Marta plans her next steps: studying criminal record rules for background checks, practising simple scripting, and joining a regional network of privacy practitioners. Halden offers her a part-time privacy coordinator role. Ms. Lin closes the course by reminding her that the most valuable professional habits she has shown are checking practice against policy, stating evidence honestly and finding solutions that respect candidates while supporting the business that serves them. She also volunteers to review the networking-site integration, applying the Article 14 reasoning she learned in her second chapter of the course.

Worked example

Marta compiles a synthetic portfolio of eight items with cover notes, accepts feedback on legal reasoning and scripting, confirms changes remain in place at Halden and plans continuing development.

Synthetic case. The portfolio is synthetic.

Errors and limits

Portfolios can overstate individual contribution; credit colleagues accurately.

Exercises

• EX056 — Portfolio items. Name three portfolio items.
  Show marking criteria

  Rubric: 3 = data map, retention analysis, access workflow, register, breach, ethics case, troubleshooting, redaction;; 2 = three;; 1 = one;; 0 = none.
• EX057 — Cover note. What does each cover note explain?
  Show marking criteria

  Rubric: 3 = problem, actions, evidence and outcome;; 2 = most;; 1 = one;; 0 = none.
• EX058 — Growth areas. What two growth areas did Ms. Lin identify?
  Show marking criteria

  Rubric: 3 = background check legal reasoning and scripting;; 2 = both;; 1 = one;; 0 = none.
• EX059 — Remaining gaps. Name one remaining gap at Halden.
  Show marking criteria

  Rubric: 3 = background check contracts; networking-site Article 14 notices;; 2 = one;; 1 = vague;; 0 = none.
• EX060 — Next role. What role does Halden offer Marta?
  Show marking criteria

  Rubric: 3 = part-time privacy coordinator;; 2 = partly correct;; 1 = vague;; 0 = none.