251019 KU European Data Protection Law (2023S)

Aims: Introduction to European Data Protection Law
Contents: Given the rise of digital technologies in our lives, the right to privacy and the protection of personal data have become crucial to both, individuals and businesses. Since "data" are everywhere, a proper understanding of the rules governing data protection is essential.
The course provides students with a thorough knowledge of:
- The principles governing the processing of personal data;
- The GDPR's territorial and material scope;
- The rights of data subjects (i.e. individuals whose personal information is processed);
- The obligations of controllers (natural or legal persons determining the purposes and means of the processing of personal data);
- The role of data processors (natural or legal person that processes personal data on behalf of the controller);
- The challenges with international data transfers (incl EU case law and recent developments);
- Data Protection Authorities in the EU/EEA and their guidance.
Special attention is also given to data protection issues raised by the use of Artificial Intelligence, such as the legality of technologies involving automated individual decision-making and profiling.
By the end of the course, students are expected to have a thorough knowledge of the logic governing the GDPR, which also has become a global standard for data protection. The students will be able to navigate safely through the provisions of the GDPR with a solid understanding of the rationale behind the GDPR.
Method: Lecture and discussion