Postgraduate Course in Data Protection and Information Security
The Postgraduate Course in Data Protection and Information Security provides students with both legal and technical tools, and skills to develop with full transparency the functions inherent to the role of Data Protection Officer (DPO) and the management of personal data in companies and law firms inside and outside of Spain.
Next edition
Classes start: 04 April, 2024
Program ends: 16 June, 2024 (To be confirmed)
Modality
Language
ECTS credits
Schedule
Price
The Postgraduate Course in Data Protection and Information Security from Pompeu Fabra University, taught by the UPF Barcelona School of Management, provides you with both education and the tools and legal skills necessary to develop with total transparency the functions corresponding to the data protection officer of a company or organization, both public and private in companies inside and outside Spain.
Why choose this program
Gain access to training endorsed by the Spanish Data Protection Agency
The contents of the program comply with the legal requirement of duration in hours that the students must pass provided for in the Certification Scheme (Section 6.3) approved by the Spanish data protection regulations and as such has been recognized by the Certification Institution Bureau Veritas and by the Certification Institution ISMS Forum.
Get applied knowledge
This postgraduate prepares you to transparently identify if a certain legal activity, which involves personal data, complies with the GDPR and other applicable regulations, providing the technical and organizational knowledge to be able to comply with the provisions of the GDPR and other regulations applicable for lawyers and other professionals in the sector.
Learn from a multidisciplinary teaching team
A multidisciplinary team of teachers provides students with the legal knowledge necessary to train both in the field of law and in information and communication technologies.
Functions in great demand
The program prepares you at a professional level to develop the role of Data Protection Officer (DPO) in a company, one of the essential functions in any public or private organization.
Who is it for?
The Postgraduate Course in Data Protection and Information Security is aimed at those professionals (jurists, lawyers, engineers, and graduates in related disciplines) who already exercise or want to exercise the function of Data Protection Officer in companies within and outside of Spain, who want to specialize in the management of personal data, and/or want to be certified as a Data Protection Officer.
Accreditations
This course meets the maximum duration requirement in hours that the student must take (180h) provided for in the Certification Scheme (section 6.3) approved by the Spanish data protection regulations and as such has been recognized by the Certification Institution ISMS Forum (certificate) and by the Certification Institution Bureau Veritas (certificate). The UPF Barcelona School of Management complies with the Responsible Declaration and the Code of Ethics required by the Spanish Agency for Data Protection.
The course takes place On campus and Live and consists of 10 ETCS credits, which are equivalent to 250 hours of student dedication. According to the provisions of the AEPD-DPD scheme, 125 hours correspond to domain 1 (General data protection regulations, 5 ECTS), 75 hours to domain 2 (Active responsibility, 3 ECTS) and 50 hours to domain 3 (Techniques to guarantee compliance with data protection regulations and other knowledge, 2 ECTS).
Curriculum
6The course at our university meets the maximum duration requirement in hours that the student must take (180h) provided for in the Certification Scheme (Section 6.3) approved by the Spanish data protection regulations and as such has been recognized by the ISMS Forum and Bureau Veritas.
It is structured through 3 large modules or domains oriented to the professional practice of lawyers and other related professions: General Data Protection Regulations (5 ECTS credits), Active Responsibility (3 ECTS credits) and Techniques for Information Security (2 ECTS credits).
Upon completion of the course, students will be able to sit the exam to become certified as an expert DPO in any of the accredited collaborating entities.
Complete program curriculum.
General Data Protection Regulations
Active Responsibility
Techniques for Information Security
Complementary activities
The Postgraduate Course in Data Protection and Information Security also includes the possibility of participating in practical activities and activities for personal and professional growth such as:
- UPF-BSM Inside: is a group of interdisciplinary subjects (applied data, communication, creativity, innovation and project management, sustainability and leadership among others) that, if you take this program, you can access at no additional cost. They are 100% online and you can take them throughout the academic year at your own pace, as they have been designed as self-study subjects.
Qualification obtained
Once you have passed the program, you will obtain an electronic degree (e-Título) for Curso de Postgrado en Protección de Datos y Seguridad de la Información, issued by Pompeu Fabra University.
The e-Título is an authentic digital degree, issued in pdf format and electronically signed, with the same legal validity as if it were in paper format.
Faculty
Students receive interdisciplinary training given by lawyers and other law professionals from Pompeu Fabra University and experts in data protection, as well as in information and communication technology.
Academic directors
Associate Professor UPF
Faculty
Senior Lecturer UPF-BSM
Vicedean for Social Impact and Academic Innovation
Associate Professor UPF
Methodology
Completely face-to-face mode of education. It includes theoretical and practical training by teachers using the discussion of simulated cases and the active participation of the student.
Theoretical basis
The program of our university offers the student a theoretical basis on the role of the data protection officer through the modules or domains that make up its study plan, necessary for the optimal acquisition of knowledge and skills by the student who wishes to gain access to an expert position.
Practical cases
Together with the theoretical base taught by the teachers, the learning about data protection is strongly based on the resolution of problems by the student, through the discussion of hypothetical cases and the decisions of courts and data protection agencies.
Active student participation
The educational methodology of the program implies an active participation by the student in an expert educational environment made up of criminal law professionals and information technology professionals.
Adheres to the certification scheme
Both the content of data protection and its structure adhere to the Certification Scheme proposed by the AEPD, so that at the end of the postgraduate course, the participant does not have any difficulty in passing the certification exam as a DPO and accessing professions such as that of lawyer.
Evaluation
The evaluation of the different modules or domains that make up the postgraduate education program follows the guidelines set out by the AEPD Certification Scheme so that the course meets the requirements, and the students can take the certification exam and undertake professional practice as lawyers.
The three domains will be evaluated separately. Consequently, each student will have a separate grade for each of them. The value of each of the evaluations on the course is the following: Domain 1 (50%); Domain 2 (34%); and Domain 3 (16%).
The evaluation of the different Domains will consist of the following:
- General legal regulations on data protection: carrying out a multi-answer test of between 30 and 40 questions, on the different aspects discussed in the classes.
- Proactive responsibility: group realization of a practical case and presentation of its defence.
- Techniques for data protection: carrying out a multi-answer test of between 20 and 25 questions, on the different aspects discussed in the classes.
Any student who fails one of the domains will be able to carry out a recovery activity. Exceptionally, in the case of having obtained a grade higher than 4 and lower than 5 in one of the domains, the student may compensate the grade with the grades obtained in the other domains. It is necessary to obtain, at least, a 5 as a global postgraduate mark to pass it. Likewise, it is necessary to have attended 80% of the sessions.
Tools
The On-Campus&Live methodology allows you to follow the program in person and also remotely.
In this modality, two stable subgroups are opened that will coexist throughout the course: one face-to-face and the other with 100% remote students. The remote students (a maximum of 15 places per course) will follow the program in a synchronous way with the face-to-face students. That is, they will share the same school calendar and schedule as the face-to-face students.
Project-oriented learning and the combination of lectures and active methodologies such as case studies, flipped learning, solving real problems, and professional simulations allow the student to connect theory and practice, acquire advanced skills, and achieve learning which is transferable to the job. The face-to-face modality is enriched with elements of online programs (virtual learning environment, multimedia resources, among others) so that the learning experience of the two subgroups is equally satisfactory.
You will have:
- Master's or postgraduate work to learn by doing
- A personal mentor to monitor your Master's Final Project (TFM) or Postgraduate Final Project (TFP)
- Digital resources to achieve transversal skills
- Interdisciplinary activities and workshops
- Digital resources and audiovisual blocks for online learning
- Active methodologies for transferable learning
Professional Future
The credits of the degree prepare you following the AEPD certification scheme and, with the help of the teachers, they provide you with the tools and legal and technical skills to develop the functions inherent to the role of Data Protection Officer (DPO).
Student profile
Students who register are mainly senior, with several years of professional experience in law firms and in positions related to the data protection officer and of local origin. Students come mainly from the area of Law, although there are also profiles from other areas such as Economics, Business Administration and Management, Political Science, and Public Administration, as well as technology and communications. Students usually have some experience and knowledge as a DPO.
Career opportunities
Due to the number of credits of the university program on Data Protection, there is not an option to undertake extracurricular internships. The Postgraduate course complies with the duration requirement for hours foreseen in the certification scheme (Section 6.3) approved by the Spanish Data Protection Agency of 13 June 2018 and as such has been recognized by the Certification Institution ISMS Forum and by the Certification Institution Bureau Veritas.
Once the course is completed, students will be able to take the exam to obtain the DPD certification under the AEPD Certification Scheme.
- Data Protection Officer in any organization or company of a public or private nature, inside or outside of Spain.
Admission and enrolment
Our admission process consists of a rigorous evaluation of each application to preserve the quality of the group as well as the training, experience, and work capacity of all students.
Who can apply?
You must be a university graduate or a higher graduate.
Other students without the required university degree may take part in the selection process for the data protection course by virtue of their academic or professional merits and the place of work they occupy
Those students who do not have Spanish as one of their mother tongues or who did not have it as a teaching language in their training studies, must prove during the enrolment period that they have at least a B2 level of Spanish (Common European Framework of Reference), as well as fluently take part in a personal interview with the academic director, if necessary.
How to apply?
To apply for admission to this program, students must read and accept the Terms and Conditions of Contract once they start the application for admission through the following form.
Application for admission
Complete your application within the next admission rounds:
Round | Application deadline | Admission resolution |
---|---|---|
14 | 18/07/2023 | 27/07/2023 |
15 | 01/09/2023 | 14/09/2023 |
16 | 14/09/2023 | 28/09/2023 |
Applications for admission will be evaluated when you complete the following steps:
- Complete the online admission form.
- Pay the €120 admission fee. This amount will be returned if you are not admitted.
- Send the following documents through the online platform e-registrar:
- Presentation letter or video
- CV
- Scanned copy of university degree (if you are in the last year of your degree, you can provide your academic records)
- Scanned copy of Transcript of Records. Make sure that it includes your GPA (Grade Point Average)
- Scanned copy of ID Card or Passport
- Passport-size photo (jpg format)
Additional documents may be requested in certain cases.
Application rounds are subject to the number of places available on the program.
Admission
- The Admissions Committee will select the candidates on the basis of a personal or CV-based interview.
- You will be notified of the admission decision in writing.
Enrolment
- Registration must be paid within a 15 days after the admission.
- Once the letter of acceptance to the program has been received, you will need to submit the following original documents before the course begins:
- Stamped and/or authenticated photocopy of your university degree.
- If you have a foreign degree you may need to submit additional documents.
- Paying the reservation fee (25% of the program's tuition fees) is essential in order to reserve your place
- If you pay the tuition fees by bank transfer you will be required to introduce the program code. The program code for this course is 3329.
- The remaining tuition fees must be paid 2 weeks before the start of the course.
Grants, scholarships and financing
Scholarships
The UPF Barcelona School of Management offers you different means of financing so that you can take any of our programs without worry. We offer you the opportunity to finance part of your program, either by rewarding your talent through scholarships, through grants from entities dedicated to promoting education or through collaboration agreements with financial entities.