Checking date: 14/05/2025 13:16:46


Course: 2025/2026

Personal work about regulation of the data protection and the security of the information
(12210)
Master in Telecommunications Law and Information Technology (Plan: 314 - Estudio: 299)
EPD


Coordinating teacher: SERNA BILBAO, MARIA NIEVES DE LA

Department assigned to the subject:

Type: Compulsory
ECTS Credits: 3.0 ECTS

Course:
Semester:




Requirements (Subjects that are assumed to be known)
(M2.A1) Fundamentals and Legal Framework of Personal Data Protection (M2.A2) Supervision, Control, Auditing, and Security Measures (M2.A3) The Single Data Market and Sector-Specific Regulations
Objectives
The primary objective of this course is for students to integrate and apply the theoretical and practical knowledge acquired in the three previously taught subjects by completing a project on a topic proposed by the instructor from within the module. The project may be developed individually or in groups and will cover a subject related to the DPO (Data Protection Officer) Scheme or a theoretical-practical issue previously addressed. Students will be informed in advance of the key aspects required for project completion, including the assigned topic. The course aims to foster critical analysis, autonomy, and problem-solving abilities in real-world contexts. Students are expected to produce legal writings¿such as reports, opinions, or research papers¿on specific topics, preparing them for their Master's Final Project. Their work must include original, clear, and critical contributions. The written report must be submitted on the designated date through the platform and defended orally. All group members must actively participate in both the writing and oral presentation and may be questioned on any part of the content. Assessment will be based on both the written report and the oral defense. In light of the above, the following general and specific objectives are pursued: General Objectives: ¿ Fulfill, apply, and further develop the goals of the professional specialization programme in privacy and data protection, aligned with the Certification Scheme for Data Protection Officers (DPO) by the Spanish Data Protection Agency. ¿ Develop the ability to interpret the legal and organizational framework of data protection, with a special focus on sector-specific regulations, transparency, and the data market. ¿ Analyse, plan, evaluate, and mitigate risks related to non-compliance with data protection regulations, while also assessing sector-specific, transparency, and open data norms. ¿ Critically analyse legal texts for accurate interpretation and application to course-related matters. ¿ Evaluate the regulatory impact and its relation to user rights within the scope of the course content. ¿ Apply acquired knowledge to real-life situations, offering solutions consistent with legal frameworks and technological evolution Specific Objectives: ¿ Deepen understanding of a selected regulatory issue, analysing applicable legal frameworks. ¿ Understand the mechanisms and regulations related to the assigned topic, offering clear conclusions and, where appropriate, recommendations. ¿ Recognise the legal boundaries of technology usage, ensuring compliance with protected rights in the case study. ¿ Interpret and assess different regulatory regimes to provide legal advice relevant to course-related topics. ¿ Identify necessary prior security measures (such as controls, audits, risk assessments) depending on the topic under development. ¿ Identify and understand the actors involved, including their rights, responsibilities, and obligations. ¿ Identify the institutions involved in each sector, including their roles, competences, decisions, and relevant actions. ¿ Advise and distinguish between various legal issues encountered in assigned topics.
Learning Outcomes
Description of contents: programme
The final project consists of an in-depth analysis of a specific topic previously addressed within the module. Students will develop a report, opinion paper, or research study, individually or in groups, based on a pre-assigned topic. The project may be individual or collaborative. During the oral defense, all group members must participate and may be questioned interchangeably. The presentation should succinctly cover the key points and conclusions of the report within a limited time, allowing the instructor to assess students¿ familiarity with the subject matter, their ability to solve identified problems, knowledge of relevant legislation and case law, and responsiveness to questions
Learning activities and methodology
Learning Activities: Students are required to independently develop a personal report on an assigned topic, applying knowledge acquired across the module. They must work with legislation, case law, documents from relevant institutions, and provide original, clear, and critical insights. The report should analyse and explain: the issue at hand, Its legal framework, the legal implications and challenges, as well as proposed solutions, recommendations, or expert opinions Teaching Methodology: Students will be assigned a topic in advance and are expected to carry out in-depth research either individually or in groups, with ongoing academic supervision. Access to library resources will be provided, including guidance on research methodologies applicable to the final Master's project. The final report should be based on European, national, regional, or local regulations, as well as case law and comparative legal perspectives. On the scheduled submission date, an oral presentation and defense will take place in class under the instructor¿s supervision. Academic Tutoring: Students may schedule tutoring sessions with the course coordinator throughout the module. Students will also meet in sessions with the course coordinator to address questions and define the scope of the project, bibliography, objectives, and other relevant aspects. Tutoring is intended to support the teaching and learning process, based on the interaction between the student and the instructor, with the aim of: (i) Guiding students' independent and group work. (ii) Exploring specific aspects of the subject in greater depth. (iii) Supporting the student¿s academic and holistic development.
Assessment System
  • % end-of-term-examination/test 0
  • % of continuous assessment (assigments, laboratory, practicals...) 100

Calendar of Continuous assessment


Basic Bibliography
  • Hernández López, José Miguel . Protección de datos personales; infracciones y sanciones penales . Tirant lo Blanch . 2021
  • La Ley . Revista La Ley Privacidad . La Ley . trimestral
  • Aracne Editrice . European review of digital administration & law . Aracne Editrice . bimensual
  • Aranzadi . Revista Aranzadi de Derecho y Nuevas tecnologías. Thomson Reuters Aranzadi . Trimestral
  • JAVIER APARICIO SALOMON. Estudio sobre la protección de datos. Thomson Reuters. 2019
  • LA LEY . Revista Derecho Digital e Innovación ¿Digital Law and Innovation Review- . LA LEY. trimestral
  • PUYOL MONTERO JAVIER; . Libro de test delegado de protección de datos (DPO) Dominio II . editorial Tirant lo blanch . ULTIMA EDICIÓN
  • PUYOL MONTERO JAVIER; . Libro de test delegado de protección de datos (DPO) Dominio I . editorial Tirant lo blanch . ULTIMA EDICIÓN
  • PUYOL MONTERO JAVIER; . Libro de test delegado de protección de datos (DPO) Dominio III. editorial Tirant lo blanch . ULTIMA EDICIÓN
  • PUYOL MONTERO JAVIER; . Estudios sobre derecho de compliance . editorial Tirant lo blanch . ULTIMA EDICIÓN
  • VVAA dir. TRONCOO. Comentario al Reglamento General de Protección de Datos y a la Ley Orgánica de Protección de Datos personales y Garantía de los Derechos Digitales, edit Civitas, 2021, ISBN: 978-84-9197-927-2. Civitas, ISBN: 978-84-9197-927-2. 2021
Recursos electrónicosElectronic Resources *
Additional Bibliography
  • ENISA. INGENIERÍA DE LA PROTECCIÓN DE DATOS De la teoría a la práctica . ENISA. 2022
  • UE. El Manual del DPD (Delegado de Protección de Datos) Guía para los Delegados de Protección de Datos en los sectores públicos y semi-públicos sobre cómo garantizar el cumplimiento del Reglamento General de Protección de Datos de la Unión Europea. UE. ULTIMA EDICIÓN . https://www.aepd.es/documento/el-manual-del-dpd-korffgeorges-esp.pdf
  • UE. Manual de legislación europea en materia de protección de datos: Luxemburgo: Oficina de Publicaciones de la Unión Europea. UE. 2020 : https://fra.europa.eu/sites/default/files/fra_uploads/fra-coe-edps-2018-handbook-data-protection_es.pdf
Recursos electrónicosElectronic Resources *
Detailed subject contents or complementary information about assessment system of B.T.
(*) Access to some electronic resources may be restricted to members of the university community and require validation through Campus Global. If you try to connect from outside of the University you will need to set up a VPN


The course syllabus may change due academic events or other reasons.


More information: https://www.uc3m.es/master/derecho-telecomunicaciones