Secure data handling

Course description:

Course content:

This MC module carries a workload of 2 ECTS, corresponding to a total study load of 52 hours. The MC module consists of a total of 5 online lectures including follow-up discussions (15 hours). As part of distance learning, participants will discuss individual areas of regulation and their application using practical examples (21 hours). Understanding of the subject matter can be verified through online consultations (4 hours). At the end of the module, participants will be assessed on the basis of test questions covering the subject matter taught (2 hours). The remaining time is allocated to exam preparation (10 hours). The list of lectures is provided below. The individual lectures follow on from each other logically.

Lecture 1 - Introduction & regulation of cybersecurity, including personal data protection and industry specifics: This lecture provides an introduction to cybersecurity and personal data protection, covering fundamental legal principles and key regulations. It explores general cybersecurity and data protection concepts, followed by sector-specific considerations, highlighting unique challenges across different industries.

Lecture 2 - Data Sovereignty in the EU: This lecture provides an overview of the EU regulatory framework for data handling and data flows. It covers the distinction between personal and non-personal data, open data, and sector-specific data categories. The lecture focuses on key regulations like the Open Data Directive, Data Governance Act, and the upcoming Data Act, exploring the legal rules for data access, reuse, and sharing within the EU. It also discusses the establishment of Common European Data Spaces and the regulation of non-personal data flows.

Lecture 3 - Electronic documents: This lecture focuses on the regulation and handling of electronic documents, emphasizing their role in ensuring evidentiary reliability. The lecture also explores trust services such as electronic signatures, seals, and timestamps, along with document archiving and conversion. Practical examples, relevant court decisions, and implementing acts are also discussed to illustrate the legal environment surrounding and securing electronic documents.

Lecture 4 - Cybercrime and Jurisdictional Issues: This lecture focuses on international frameworks for combating cybercrime, with an emphasis on the Council of Europe’s Budapest Convention, the United Nations Cybercrime Convention, and the EU Directive on Attacks against Information Systems. It covers the criminalization of cyber offenses and the challenges of cross-border investigations, such as jurisdictional issues, territoriality, and safe harbors. The lecture also examines how international collaboration can address these challenges and improve the prosecution of cybercriminals across multiple jurisdictions, using real case studies to illustrate key concepts.

Lecture 5 - Securing electronic evidence: This lecture covers the process of securing electronic evidence in cybercrime inv