Cybersecurity Law & Data Sovereignty

Key Details

This course provides students with a comprehensive understanding of cybersecurity measures and related cybercrime aspects with a focus on EU regulation and international tools. Additionally, it covers data sovereignty, teaching students the regulations surrounding data handling, digital identity, and maintaining integrity in electronic document management.

Time commitment

(Estimated) Total workload: 125 hours

The module is designed to fit around professional and personal commitments. All core content is available asynchronously for self-paced study, complemented by optional live sessions offered throughout the module.

Assessment

• Final 2-hour proctored open book exam (60%)
• Class assignments (2x 10%)
• In-class participation (20%)

Subjects covered

Cybersecurity and Cybercrime The content of this part of the module will cover the main concepts and structure of the cybersecurity law and criminal law applicable to cybercrime. The first area will include the theory and practice of cybersecurity obligations based on category of the regulated subject; liability for cybersecurity incidents; relevant case law; and tools for coordination and standardisation of cybersecurity compliance, such as cybersecurity certification.

In the second area, we will cover relevant legal provisions of substantive and procedural criminal law; categorisation of cybercrimes; as well as European and international procedural tools used in investigation and prosecution of cybercrime.

Data Sovereignty This part of the module is aimed at an in-depth exploration of the legal dimensions of specific aspects of data sovereignty and specific regimes applicable under the EU law. It prepares students to navigate the complex legal landscape in specific areas connected to various forms of data flows, in order to be able to ensure compliance in their professional practices within the EU. Apart from the regulatory regimes for processing personal data, participating in data spaces or doing business through online platforms, the content will include rules and requirements applicable to handling of electronic documents, including the relevance for constituting electronic evidence, and to the use of electronic identification and digital identity in particular in its application in the public law processes.

Learning objectives

This course provides students with a comprehensive understanding of cybersecurity measures and related cybercrime aspects with a focus on EU regulation and international tools. Additionally, it covers data sovereignty, teaching students the regulations surrounding data handling, digital identity, and maintaining integrity in electronic document management. On successful completion of this module the learner will be able to:

LO1: Understand and apply cybersecurity measures: Students will be able to understand and implement preventive and regulative measures in cybersecurity, particularly within the frameworks especially of the NIS 2 Directive, Cyber Resilience Act, Cyber Solidarity Act, and Cybersecurity Act. Students will also be able to work with and asses the regulatory framework based on particular case studies.

LO2: Assess cybersecurity legal frameworks: Students will critically assess the links between national legal regulatory frameworks and international harmonization instruments in cybersecurity.

LO3: Deploy legal tools for cybersecurity incidents: Students will be able to use legal tools and processes for handling and reporting cybersecurity incidents, especially in collaboration with cybersecurity incident response teams.

LO4: Understand cybercrime investigation and prosecution: Students will comprehend the legal tools and processes for investigating and prosecuting cybercrime, particularly through international instruments like the Budapest Convention.

LO5: Handle and transfer electronic evidence: Students will gain the ability to navigate European rules and procedures regarding the production and transfer of electronic evidence and understand its relevance in legal cases including relevant case law.

LO6: Understand data sovereignty regulations: Students will be familiar with various legal regimes for data handling, including personal data transfer, electronic document management, and digital identity, with a focus on retaining integrity through the chain of custody.

Module leaders

Name: Pavel Loutocký

Title: Dr.

Organisation: Masaryk university