Data protection and Privacy (5 cr)

Evaluation scale

H-5

Content scheduling

Regulation of data protection in Finland, in EU and world wide
Data Ombudsman’s operation and duties
Data Protection Officer’s duties
Description of the personal data file
Data protection in electronic data communications
Privacy protection according to criminal law
Protection of privacy in working life
Data protection and privacy in social media and in the internet world

Objective

After completing the course the student can:
- list regulations of data protection in Finland and in EU
- give examples of the duties of personnel working with data protection and privacy
- construct a privacy policy
- protect his/her privacy in electronic data communication
- provide examples of the rights to check how his/her own privacy has been protected in different environments
- plan and conduct actions required by the data and privacy protection in an SME sector enterprise or similar size organization
- assess the efficiency of these actions and give justified improvement proposals for them

Content

The course contains knowledge of the following areas:
- General Data Protection Regulation
- Practical Data Protection
- Online Privacy

Materials

Will be provided in Optima during the course.

Exam schedules

Mid course during lecture. May be electronically retaken at exam aquarium at the library.

Student workload

Groupwork on legislation includes mandatory attendance during presentations.
26h lectures
80h individual and group homework
29h exam (including study time)

Evaluation methods and criteria

Homework, Groupwork and exam. Must get a passing grade on each.

Failed (0)

Failing grade in homework, groupwork OR exam.

Assessment criteria, satisfactory (1-2)

40%-55% of homework correctly finished.
40%-55% of group homework correctly finished.
Less than 15/25 points in exam on basics and legislation of data protection.
Student has basic understanding of legislation in data protection and knows the main contact points for additional information. Student can identify technical solutions for data protection.

Assessment criteria, good (3-4)

55%-85% of homework correctly finished.
55%-85% of group homework correctly finished.
Less than 20/25 points in exam on basics and legislation of data protection.
Student knows the legislation in data protection and the roles and responsibilities of main actors. Student can recommend relevant technical solutions for data protection as well as act correctly in case of a data breach.

Assessment criteria, excellent (5)

>85% of homework correctly finished.
>85% of group homework correctly finished.
Over 20/25 points in exam on basics and legislation of data protection.
Student knows the legislation in data protection and the roles and responsibilities of main actors, and understands the prerequisites for data processing and transfers. Student can recommend relevant technical and organisational solutions for data protection as well as act autonomously in case of a data breach. Student can conduct data protection assessments.