Privacy Engineering


Content, progress and pedagogy of the module

Data protection and privacy is today an integrated element of digital services. Businesses and organisations that for example store or process personal data must protect the privacy of natural persons (users) and provide possibilities for them to control their data. This course examines the process of privacy engineering from the understanding of what the data protection needs are to implementable solutions. Specifically, the course addresses the GDPR and/or other relevant legislative documents which can be said to state requirements for data protection and for any privacy engineering. The course has a focus on discussion and application of different data protecting solutions.

Learning objectives


The student must have knowledge of:

  • The concept of "privacy" in data protection
  • Application of system development-relevant principles for “privacy by design” and “privacy by default”
  • Principles for privacy impact assessments and data protection impact assessments
  • Privacy controlling / privacy protective technologies such as minimization, anonymity and other central concepts and solutions
  • Concepts such as for example data confinement and other privacy related concepts being discussed
  • Communicating privacy issues and choices to users via interfaces


The student must be able to:

  • Analyse cases from a data privacy engineering angle
  • Explain the principles of "privacy by design" and "privacy by default"
  • Evaluate different privacy principles in selected cases by use of risk assessments
  • Distinguish between different privacy enhancing solutions
  • Evaluate different privacy controlling principles in relation to a particular case
  • Use different methods to investigate and assess data privacy


The student must have the competences to:

  • Apply different data protection principles to selected examples
  • Apply data impact assessment principles in selected cases and point to particular privacy enhancing or controlling solutions
  • Apply the principles in for example minimization, anonymization and other technical solutions, in a case
  • Reflect on various data protection principles and solutions
  • Reflect on concepts such as for example Data Confinement and other related concepts related for privacy enhancing solutions

Type of instruction

Types of instruction are listed at the start of §17; Structure and contents of the programme.



Name of examPrivacy Engineering
Type of exam
Written or oral exam
Permitted aidsFind the information about the allowed tools on the exam specification
Assessment7-point grading scale
Type of gradingInternal examination
Criteria of assessmentThe criteria of assessment are stated in the Examination Policies and Procedures

Facts about the module

Danish titlePrivacy Engineering
Module codeESNCYSK3K7
Module typeCourse
Duration1 semester
Language of instructionEnglish
Empty-place SchemeYes
Location of the lectureCampus Copenhagen
Responsible for the module


Study BoardStudy Board of Electronics and IT
DepartmentDepartment of Electronic Systems
FacultyThe Technical Faculty of IT and Design