Data Protection in IT Projects

TEACHING UNIT 1. DATA PROTECTION IN IT Introduction and Objectives Data, Information, and Information Technology Data Protection vs. Privacy European Awareness of Privacy Protection Reference to the Evolution of Spanish Regulations The European Convention on Data Protection Resolutions (and) of the Committee of Ministers of the Council of Europe Directive 95/46/EC Principles and Rights Brief Reference to the European General Data Protection Regulation and the Resulting Spanish Legislation Bibliographic References TEACHING UNIT 2. THE EUROPEAN DATA PROTECTION REGULATION Introduction and Objectives Rationale, Entry into Force, and Applicability Principles Information and Transparency Legal Bases Consent Record of processing activities Data processor Special categories of data Bibliographic references Useful links TEACHING UNIT 3. THE EUROPEAN GENERAL DATA PROTECTION REGULATION II Introduction and objectives Accountability Risk Analysis and Impact Assessment Personal Data Breaches Privacy by Default and by Design Rights Bibliographic References Useful Links TEACHING UNIT 4. LAW 3/OF DECEMBER 5 ON THE PROTECTION OF PERSONAL DATA AND THE GUARANTEE OF DIGITAL RIGHTS Organic Law 3/Organic Law 3/of December 5 Introduction and Objectives Rationale Changes Compared to Its Predecessor References to the European General Data Protection Regulation Rights Special Processing Categories Bibliographic References Useful Links TEACHING UNIT 5. IT PROJECTS Introduction and Objectives Risk Analysis Risk Management. Concepts. Implementation. Selection and Assignment of Safeguards to Threats. Protection Assessment. Residual Risk, Acceptable Risk, and Unacceptable Risk. Accountability The Supervisory Authority in Practice Bibliography