Urban Data Regulation and Privacy Course
Online 300-hour course in Urban Data Regulation and Privacy. 6 modules covering Regulation (EU) 2016/679 General Data Protection Regulation, Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights and PILAR (CCN-CERT). Assigned tutor and enrolment open.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Understand data protection rights in the urban context.
Identify high-risk processing in smart city services.
Carry out data protection impact assessments.
Apply anonymisation techniques and differential privacy.
Interpret the new European framework for data and artificial intelligence.
Design data governance models for local councils.
Draft privacy clauses in technology procurement.
Who it's for
- Data protection officer who wants to specialise in Urban Data Regulation and Privacy.
- Municipal data governance manager who wants to specialise in Urban Data Regulation and Privacy.
- Privacy consultant who wants to specialise in Urban Data Regulation and Privacy.
- Technology lawyer who wants to specialise in Urban Data Regulation and Privacy.
- Information security manager who wants to specialise in Urban Data Regulation and Privacy.
- Open data technician who wants to specialise in Urban Data Regulation and Privacy.
- Engineering or science graduates seeking to enter local government.
What you'll work with
- Regulation (EU) 2016/679 General Data Protection Regulation
- Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights
- Regulation (EU) 2023/2854 on Data (Data Act)
- Regulation (EU) 2022/868 on Data Governance
- Regulation (EU) 2024/1689 on Artificial Intelligence
- Directive (EU) 2019/1024 on open data and the re-use of public sector information
- Royal Decree 311/2022 National Security Framework
- ISO/IEC 27701 Privacy information management
6 modules · 300 h
1.1Types of data generated in the city1.2Personal, pseudonymised and anonymous data1.3Fundamental right to data protection1.4GDPR principles applied to the city1.5Legal bases for processing in the public sector1.6Controller, processor and joint controllers1.7Municipal data protection officer1.8Spanish Data Protection Agency1.9Relevant European case law1.10Case study: classification of data from an urban platform
2.1Video surveillance in public spaces2.2Facial recognition and biometrics2.3Number plate readers and access control2.4Mobility and geolocation data2.5Smart water and energy meters2.6Public Wi-Fi and footfall analytics2.7Acoustic sensors and thermal cameras2.8Health and social services data2.9Profiling and automated decisions2.10Practice: analysis of a low-emission zone with cameras
3.1Privacy by design and by default3.2Data protection impact assessment (DPIA)3.3Data minimisation and purpose limitation3.4Anonymisation techniques and k-anonymity3.5Differential privacy in urban statistics3.6Aggregation and synthetic data3.7Encryption and access control3.8Retention periods and erasure3.9Record of processing activities3.10Workshop: DPIA of a pedestrian counting system
4.1European Data Strategy4.2Data Governance Act4.3Data Act4.4Open data and high-value datasets4.5Common data spaces and cities4.6Artificial Intelligence Act4.7NIS2 Directive and information security4.8National Security Framework in local authorities4.9International transfers and cloud4.10Case study: data from a private e-scooter operator
5.1Data governance model for the city5.2Urban data policies and ordinances5.3Technology procurement with privacy clauses5.4Citizens' rights and how to exercise them5.5Security breaches and notification5.6Penalty regime in public administration5.7Algorithmic transparency and public registers5.8Experiences from Barcelona, Amsterdam and Toronto5.9Regulatory compliance audit5.10Case study: managing a municipal data breach
6.1Selection of the service or platform6.2Inventory of data and processing6.3Analysis of applicable legal bases6.4Data protection impact assessment6.5Technical privacy measures6.6Proposed contractual clauses6.7Data governance model6.8Compliance and audit plan6.9Report and presentation6.10Final review with the tutor
How you'll learn
100% online training on the SEIUM campus, with downloadable materials, recorded classes and an assigned technical tutor. No fixed timetable: students progress at their own pace within the enrolment period, making it easy to combine with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is PILAR (CCN-CERT), ARX Data Anonymization Tool, OneTrust, Gestiona EIPD (AEPD), Python, in free, academic or evaluation versions. Case studies are based on real assessment procedures: an impact assessment of an urban video-surveillance system, anonymisation of mobility data for publication, and contractual analysis of data with a private operator. Assessment is continuous, module by module, plus the final integrating project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Understand data protection rights in the urban context.
Identify high-risk processing in smart city services.
Carry out data protection impact assessments.
Apply anonymisation techniques and differential privacy.
Interpret the new European framework for data and artificial intelligence.
Where this takes you
Requirements
- No prior qualification required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours spread over 3 to 5 months. That is between 10 and 15 hours a week on average, compatible with full-time work.
You will work with PILAR (CCN-CERT), ARX Data Anonymization Tool, OneTrust, Gestiona EIPD (AEPD), Python. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An in-house SEIUM diploma upon passing continuous assessment and the integrating project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area are credited towards the higher programme. Check the crediting policy when you enrol.
Related programmes
Course on Urban IoT Platforms and Interoperability
Online course of 300 hours in urban IoT platforms and interoperability, structured in 6 modules covering IoT in urban space, protocols and connectivity, urban IoT platforms,…
Autonomous Urban Transport Regulation Course
Online 300 h course in Autonomous Urban Transport Regulation. 6 modules covering Regulation (EU) 2018/858 on type-approval of motor vehicles, Implementing Regulation (EU) 2022/1426 on automated…
Course on Urban Heating and Cooling Networks
Online course of 300 hours in urban district heating and cooling networks: 6 modules covering UNE-EN 13941-1, UNE-EN 253 and the Spanish Regulation on Thermal Installations…
More in Civil, Rail & Smart Cities
All Civil, Rail & Smart Cities programmes → · How to apply · Fees & financing · Scholarships