CourseElectromobility, Batteries & Hydrogen Applications open

Course on Data Protection Regulations in Insurance

Online 300-hour course in data protection regulations in insurance. 6 modules covering Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD) and OneTrust. Assigned tutor and open enrolment.

Duration300 h
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute diploma
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this programme. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Apply data protection principles to the insurance lifecycle.

02

Prepare the record of processing activities and the mandatory documentation.

03

Manage the exercise of data subjects' rights.

04

Analyse specific processing such as health data, telematics and shared files.

05

Carry out a data protection impact assessment.

06

Manage security breaches and their notification to the authority.

07

Design a privacy compliance plan for an insurer.

Profile

Who it's for

  • Data protection officer looking to specialise in Data Protection Regulations in Insurance.
  • Privacy consultant in insurance looking to specialise in Data Protection Regulations in Insurance.
  • Data protection auditor looking to specialise in Data Protection Regulations in Insurance.
  • Information security manager looking to specialise in Data Protection Regulations in Insurance.
  • Regulatory compliance analyst looking to specialise in Data Protection Regulations in Insurance.
  • Privacy lawyer looking to specialise in Data Protection Regulations in Insurance.
  • Engineering or science graduates seeking to enter insurers.
Standards & tools

What you'll work with

  • Regulation (EU) 2016/679 (GDPR)
  • Organic Law 3/2018 (LOPDGDD)
  • Law 20/2015 (LOSSEAR, art. 99 on personal data)
  • EDPB Guidelines 01/2020 (connected vehicles)
  • Directive 2002/58/EC (electronic privacy)
  • ISO/IEC 27701 (privacy management)
Syllabus

6 modules · 300 h

  1. 1.1Data processed in the insurance lifecycle
  2. 1.2Controller and processor
  3. 1.3Processing principles
  4. 1.4Legal bases applicable to the sector
  5. 1.5Special categories of data
  6. 1.6Health data and its regime
  7. 1.7Data of injured third parties
  8. 1.8Sector vocabulary and acronyms
  9. 1.9Supervisory authority and its criteria
  10. 1.10Exercise: inventory of processing activities of an entity
  1. 2.1Record of processing activities
  2. 2.2Information to data subjects
  3. 2.3Consent management where applicable
  4. 2.4Data protection impact assessment
  5. 2.5Data protection officer
  6. 2.6Contracts with processors
  7. 2.7International transfers
  8. 2.8Security measures and their justification
  9. 2.9Retention and erasure
  10. 2.10Practice: drafting a record of processing activities
  1. 3.1Access, rectification and erasure
  2. 3.2Objection and restriction of processing
  3. 3.3Data portability
  4. 3.4Automated decisions and profiling
  5. 3.5Internal procedure for handling rights requests
  6. 3.6Deadlines and form of response
  7. 3.7Identification of the applicant
  8. 3.8Reasoned refusal and its limits
  9. 3.9Complaints to the authority
  10. 3.10Practice: procedure for handling rights requests
  1. 4.1Underwriting and health data
  2. 4.2Telematics and driving data
  3. 4.3Fraud prevention and shared files
  4. 4.4CCTV and expert assessment
  5. 4.5Marketing and commercial communications
  6. 4.6Transfers between group entities
  7. 4.7Biometric data and its use
  8. 4.8Artificial intelligence and data protection
  9. 4.9Anonymisation and pseudonymisation
  10. 4.10Practice: lawfulness analysis of a processing activity
  1. 5.1Detection and assessment of a breach
  2. 5.2Notification to the authority and affected persons
  3. 5.3Incident documentation
  4. 5.4Compliance audit
  5. 5.5Data protection indicators
  6. 5.6Training and awareness
  7. 5.7Privacy by design
  8. 5.8Relationship with information security
  9. 5.9Penalties and their prevention
  10. 5.10Practice: breach management protocol
  1. 6.1Choice of entity and scope
  2. 6.2Inventory of processing activities
  3. 6.3Lawfulness and legal bases analysis
  4. 6.4Impact assessment of a processing activity
  5. 6.5Procedure for rights and breaches
  6. 6.6Security measures plan
  7. 6.7Training and culture plan
  8. 6.8Indicators and audit
  9. 6.9Programme report
  10. 6.10Project defence
Methodology, software & labs

How you'll learn

100 % online training on the SEIUM campus, with downloadable material, recorded classes and assigned technical tutor. No fixed timetables: the learner progresses at their own pace within the intake, which makes it compatible with work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is OneTrust, PILAR (risk analysis), Gestiona EIPD tool (AEPD), advanced Excel, in free, academic or evaluation versions. Tests are studied on real data protection impact assessment procedures, breach management simulations and record of processing activities audits. Assessment is continuous per module plus the final integrative project.

Accreditable laboratories(EN ISO/IEC 17025) with rotor bench, EMC/Lightning pre-compliance, HIL/SIL, vibration/acoustics.
Evidence-oriented Master's Thesis:safety case, test plan, compliance dossier and operational limits.
Industry-mentored:lecturers with experience in training, , eVTOL/UAM and flight test.
Flexible format(hybrid/online), international cohorts and support from SEIUM Career Services.
Ethics and safety:a safety-by-design approach, cyber-OT, DIH and compliance as pillars.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Choice of entity and scope

Apply data protection principles to the insurance lifecycle.

Inventory of processing activities

Prepare the record of processing activities and the mandatory documentation.

Lawfulness and legal bases analysis

Manage the exercise of data subjects' rights.

Impact assessment of a processing activity

Analyse specific processing such as health data, telematics and shared files.

Procedure for rights and breaches

Carry out a data protection impact assessment.

Career opportunities

Where this takes you

Data protection officerPrivacy consultant in insuranceData protection auditorInformation security managerRegulatory compliance analystPrivacy lawyer
Admissions & scholarships

Requirements

  • No prior degree required.
  • Internet connection and a computer capable of running the programme's software.
  • Sufficient level of Spanish to follow technical regulatory texts.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

FAQ

Frequently asked questions

The programme comprises 300 hours in total, spread over 3 to 5 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.

The course works with OneTrust, PILAR (risk analysis), Gestiona EIPD tool (AEPD), advanced Excel. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.

An own SEIUM diploma upon passing the continuous assessment and the integrative project. It is in-house training, not an official qualification from the Ministry.

Yes. Modules passed in a course or postgraduate diploma in the same area are credited towards the higher programme. Check the recognition policy when you enrol.

Course on Data Protection Regulations in InsuranceEnrol
Scroll to Top
SEIUM – Institute of Advanced Engineering
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.