Secure data handling

Key Details

This MC carries a workload of 2 ECTS, corresponding to a total study load of 52 hours. The MC consists of a total of 5 online lectures including follow-up discussions (15 hours). As part of distance learning, participants will discuss individual areas of regulation and their application using practical examples (21 hours). Understanding of the subject matter can be verified through online consultations (4 hours). At the end of the MC, participants will be assessed on the basis of test questions covering the subject matter taught (2 hours). The remaining time is allocated to exam preparation (10 hours).

The list of lectures is provided below. The individual lectures follow on from each other logically.

Lecture 1 – Introduction & regulation of cybersecurity, including personal data protection and industry specifics.

Lecture 2 – Data Sovereignty in the EU

Lecture 3 – Electronic documents

Lecture 4 – Cybercrime and Jurisdictional Issues

Lecture 5 – Securing electronic evidence The MC will be completed with an exam consisting of a test. The final exam will be conducted online in the presence of instructors, with both microphone and camera turned on. The test contains 25 questions randomly generated from the MC question bank. Five random questions will be selected from each of the five lectures and their corresponding practical exercises. To pass the exam, it is necessary to score at least 50% on the test. As part of the conclusion of the module, a consultation hour will also be provided, during which the correct answers and contextual aspects of the relevant legal regulations will be discussed with the students.

Subjects covered

Lecture 1 – Introduction & regulation of cybersecurity, including personal data protection and industry specifics: This lecture provides an introduction to cybersecurity and personal data protection, covering fundamental legal principles and key regulations. It explores general cybersecurity and data protection concepts, followed by sector-specific considerations, highlighting unique challenges across different industries.

Lecture 2 – Data Sovereignty in the EU: This lecture provides an overview of the EU regulatory framework for data handling and data flows. It covers the distinction between personal and non-personal data, open data, and sector-specific data categories. The lecture focuses on key regulations like the Open Data Directive, Data Governance Act, and the upcoming Data Act, exploring the legal rules for data access, reuse, and sharing within the EU. It also discusses the establishment of Common European Data Spaces and the regulation of non-personal data flows.

Lecture 3 – Electronic documents: This lecture focuses on the regulation and handling of electronic documents, emphasizing their role in ensuring evidentiary reliability. The lecture also explores trust services such as electronic signatures, seals, and timestamps, along with document archiving and conversion. Practical examples, relevant court decisions, and implementing acts are also discussed to illustrate the legal environment surrounding and securing electronic documents.

Lecture 4 – Cybercrime and Jurisdictional Issues: This lecture focuses on international frameworks for combating cybercrime, with an emphasis on the Council of Europe’s Budapest Convention, the United Nations Cybercrime Convention, and the EU Directive on Attacks against Information Systems. It covers the criminalization of cyber offenses and the challenges of cross-border investigations, such as jurisdictional issues, territoriality, and safe harbors. The lecture also examines how international collaboration can address these challenges and improve the prosecution of cybercriminals across multiple jurisdictions, using real case studies to illustrate key concepts.

Lecture 5 – Securing electronic evidence: This lecture covers the process of securing electronic evidence in cybercrime investigations, from identification to preservation and analysis. It highlights key international and EU legal frameworks, including the Budapest Convention and European regulations, for cross-border evidence collection. The lecture also addresses the role of Internet Service Providers (ISPs) in supporting investigations, focusing on privacy, cooperation, and legal responsibilities. Case studies illustrate the importance of evidence integrity and the legal challenges involved in digital forensics.

Learning objectives

Knowledge – The graduate can:

• introduce basic terminology in the field of secure data handling, understand the fundamental aspects of legal regulation,

• explain current methods of regulation

Skills – The graduate can:

• identify relevant legislation and be able to apply it to relevant entities

• analyze and propose specific vectors for setting processes and rules for relevant entities

• assess regulatory settings in a broader context and with related impacts on management

• analyze the impacts of legal regulation in the field of secure data handling, including its specific manifestations

• evaluate the impacts of secure data handling regulation, including the setting of compliance aspects and their specifics.

Competence – The graduate can:

• think creatively and work independently

• plan and organize their own activities

• collaborate effectively

• assess and process safety requirements imposed by legislation.

Module leaders

Name: František Kasl

Title: Dr.

Organisation: Masaryk university