Introduction to Data Protection Law MOOC

The MOOC consists of six modules, each involving short video lectures, reading and learning exercises. The modules are the following:

1. Background

The first module identifies key historical influences in the development of data protection law, discusses common narrative justifications for data protection, reviews the general principles of EU law and recalls the human rights framework behind data protection law.

2. Terms and Roles

The second module covers the key terms of the GDPR, including personal data and data processing. In addition, the module identifies the three main actors involved in data processing (data subject, controller and processor) and discusses the application of these roles in different processing situations.

3. Legal Basis

The third module explains legal basis as a prerequisite for all personal data processing and discusses its justifications. The module also identifies the key legal bases for lawful data processing under the GDPR, including consent. In addition, the module covers differences between personal data and special categories of data, and their respective legal bases.

4. Rights

The fourth module explains the nature of data subjects’ rights and discusses different rights listed in the GDPR. The module focuses in particular on the information and access rights and their purposes, the right to erasure and its history, and the right to data portability.

5. Principles

The fifth module lists the general principles of processing as defined in the GDPR, article 5 and explains the role of principles in the GDPR and in its application. In addition, the module discusses the concepts and importance of transparency, purpose limitation, data minimization, and accountability.

6. Enforcement

The sixth module describes the role of Data Protection Authorities and their ability to enforce the GDPR. It also discusses the reasoning behind different systems of enforcement, and explores different ways that data subjects can enforce the law.