OVERVIEW

The course focuses on the knowledge necessary to understand the topic of personal data protection and privacy with reference to community and national legislation on the matter.

AIMS AND CONTENT

LEARNING OUTCOMES

The course aims to provide students with the ability to understand issues related to personal data protection and their free movement.

AIMS AND LEARNING OUTCOMES

At the end of the course, students will have explored personal data protection regulations at community and national levels, and the policies implemented by the legislator to guarantee the rights of data subjects and the duties of third parties processing personal data. They will be able to recognize the main scenarios of personal data processing and their related regulatory compliance.

PREREQUISITES

Good speculative ability and propensity for problem-solving techniques.

TEACHING METHODS

Lessons in presence and, where possible, via MS TEAMS.

SYLLABUS/CONTENT

• Privacy and personal data protection: historical bases, terminology, and classification of sources.

- European and Italian legislation before the European General Data Protection Regulation.

- Current community and national legislation.

- The inspiring principles of the GDPR and its structure.

- Personal data: terminology and classification.

- GDPR: object, purpose, and scope of application.

- Processing of personal data: terminology, principles, classification, and actors involved in processing.

- Conditions for lawful processing.

- Rights of data subjects.

- Responsibilities of data processing actors.

- The Data Protection Officer (DPO).

- Processing security, duties of data processing actors, the risk-based approach.

- Data Protection Impact Assessment (DPIA).

- Codes of conduct and certifications.

- Transfer of personal data outside the EEA.

 - Supervisory Authorities and sanctioning regimes.

 - Personal data protection in specific areas: employment, healthcare, marketing, and sales.

- Notes on privacy models in non-EEA countries.

RECOMMENDED READING/BIBLIOGRAPHY

European General Data Protection Regulation (GDPR)

Consolidated text of Legislative Decree 196/2003 as amended by Legislative Decree 101/2018

Other teaching material will be provided during the course

TEACHERS AND EXAM BOARD

LESSONS

LESSONS START

1st semester

Class schedule

The timetable for this course is available here: Portale EasyAcademy

EXAMS

EXAM DESCRIPTION

Oral

ASSESSMENT METHODS

The questions asked during the exam will ascertain the understanding of the topics covered and the ability to apply the knowledge acquired in practical situations.