(M2.A1) Fundamentals and Legal Framework of Personal Data Protection

The main objective of this course is to provide specialized training in supervision, control, auditing, and the implementation of security measures in the field of personal data protection. The course addresses the study of proactive accountability measures, audits, risk analysis and management methodologies, sanctioning procedures, and judicial protection mechanisms. The goal is for students to acquire the necessary and up-to-date knowledge of the different components of the syllabus, supported by teaching delivered by experienced academics and industry professionals. Training includes not only the theoretical framework but also the practical and technical aspects required to meet the objectives of the professional specialization programme in privacy and data protection, as required by the Data Protection Officer (DPO) Certification Scheme of the Spanish Data Protection Agency (DPA). In light of this, the course aims to achieve the following general and specific objectives: General Objectives: - To fulfil, apply, and further develop the goals of the professional training programme in privacy and data protection, in accordance with the DPO Certification Scheme established by the Spanish Data Protection Agency. - To develop the ability to interpret the legal and organizational framework of data protection, with particular emphasis on proactive accountability and ISO standards. - To analyse, plan, evaluate, and manage the risks arising from non-compliance with data protection legislation, and to assess the appropriate proactive measures required in each case. - To foster critical analysis of legal texts for their correct interpretation and, where applicable, their practical application to the subject matter of the master¿s programme. - To assess regulatory impact and its relationship to users¿ rights in areas covered by the course. - To develop the ability to apply knowledge to real-life situations, identifying solutions aligned with legal frameworks and technological developments. Specific Objectives: - To understand supervision, control, auditing, and the adoption of security measures in the field of personal data protection. - To grasp the mechanisms involved in supervision, control, auditing, and security measures, and their impact on data protection, with particular emphasis on risk analysis and management, as well as ISO standards. - To understand the legal limits of technology use, ensuring its application does not infringe the right to personal data protection, and to become familiar with the necessary proactive security measures, controls, audits, and risk assessments. - To interpret, analyse, and assess applicable data protection regulations in order to provide informed legal advice on course-related matters. - To differentiate among the security measures that must be adopted (control mechanisms, audits, risk assessments, etc.) in order to protect data protection rights as well as related rights. - To identify and understand the roles, rights, and obligations of all stakeholders involved in data protection activities. - To identify and understand the institutions operating in this field, including their responsibilities, actions, and resolutions. - To be capable of providing legal advice on proactive measures and on the processes of supervision, control, and auditing to uphold the right to personal data protection. .

II . Monitoring , control, audit and security measures ( 3 ECTS ) 1. Security measures and proactive accountability in personal data protection 2. The sanctioning procedure and judicial protection 3. Data audits of information systems 4. Risk analysis and management of personal data processing and methodologies 5. Practical case studies

Learning Activities ¿ Theoretical and practical classes ¿ Individual or group student work, including in-class presentation and defense of assignments ¿ Resolution of practical case studies Active student participation in sessions is essential. As this is an in-person Master's programme, class attendance is mandatory to receive a grade. Students must comply with the attendance requirements established in the Master's academic regulations and on Aula Global in order to be assessed. The methodology to be followed in this course is as follows: ¿ In-class presentations by various instructors, supported by digital and audiovisual media, where the main concepts of the subject are developed and recommended readings are provided to complement students¿ learning. ¿ Critical reading of texts recommended by the course lecturer to broaden and consolidate knowledge of the subject, which may be followed by class discussions. ¿ Resolution of practical cases or the drafting of legal reports, opinions, etc., as proposed by the lecturer, for individual or group resolution. ¿ Presentation and discussion in class¿moderated by the lecturer¿of training materials related to the subject, including the students' comprehension and exposition of those materials. Tutoring Students will have access to tutoring sessions with the course coordinator. The aim of tutoring is to support the teaching and learning process through interaction between the student and the instructor, with the following objectives: (i) To guide students in their independent and group work (ii) To explore specific aspects of the subject in greater depth (iii) To support the student¿s academic and holistic development Tutoring sessions will take place at the times and under the conditions specified in Aula Global.