Content, progress and pedagogy of the module

Data protection and privacy is today an integrated element of digital services. Businesses and organisations that for example store or process personal data must protect the privacy of natural persons (users) and provide possibilities for them to control their data. This course examines the process of privacy engineering from the understanding of what the data protection needs are to implementable solutions. Specifically, the course addresses the GDPR and/or other relevant legislative documents which can be said to state requirements for data protection and for any privacy engineering. The course has a focus on discussion and application of different data protecting solutions.

Learning objectives

Knowledge

The student must have knowledge of:

• The concept of "privacy" in data protection
• Application of system development-relevant principles for “privacy by design” and “privacy by default”
• Principles for privacy impact assessments and data protection impact assessments
• Privacy controlling / privacy protective technologies such as minimization, anonymity and other central concepts and solutions
• Concepts such as for example data confinement and other privacy related concepts being discussed
• Communicating privacy issues and choices to users via interfaces

Skills

The student must be able to:

• Analyse cases from a data privacy engineering angle
• Explain the principles of "privacy by design" and "privacy by default"
• Evaluate different privacy principles in selected cases by use of risk assessments
• Distinguish between different privacy enhancing solutions
• Evaluate different privacy controlling principles in relation to a particular case
• Use different methods to investigate and assess data privacy

Competences

The student must have the competences to:

• Apply different data protection principles to selected examples
• Apply data impact assessment principles in selected cases and point to particular privacy enhancing or controlling solutions
• Apply the principles in for example minimization, anonymization and other technical solutions, in a case
• Reflect on various data protection principles and solutions
• Reflect on concepts such as for example Data Confinement and other related concepts related for privacy enhancing solutions

Type of instruction

Types of instruction are listed at the start of §17; Structure and contents of the programme.

Exam

Exams