Master's Degree · 60 ECTS

Master in Data Protection

A twelve-month, fully online programme in data protection and privacy law. Built for professionals ready to take on one of the most in-demand and future-proof roles in modern organisations, from GDPR compliance to privacy in the age of AI.

Duration12 months

Format100% online

Credits60 ECTS

IntakeSept 2027

The programme

Privacy expertise the world now depends on

Data protection has become one of the defining responsibilities of the modern organisation. Regulation such as the GDPR has given individuals real rights over their personal data and placed serious obligations, and serious penalties, on the bodies that handle it. Every organisation of any size now needs people who genuinely understand this landscape.

The Master in Data Protection builds that expertise from the ground up. It covers the legal foundations of processing personal data, the rights of data subjects, the role and duties of the Data Protection Officer, data security, and the complex question of international data transfers, before turning to the frontier where privacy meets artificial intelligence and emerging technology. You will graduate ready to advise, implement, and lead on privacy.

The programme is taught entirely in English and delivered online, with support available in Spanish where needed, so you can qualify for a specialist career without interrupting your current one.

Curriculum

What you will study

The programme comprises 60 ECTS credits across seven taught modules and a supervised master's thesis, delivered over two semesters.

Basics of Data Protection9 credits

Legal Bases for Processing Personal Data9 credits

Data Subject Rights6 credits

Data Protection Officers6 credits

Data Security6 credits

International Data Transfers6 credits

Privacy, AI and Emerging Technologies6 credits

Master's Thesis / Trabajo Fin de Máster12 credits

Total60 ECTS

The programme runs over 12 months, split into two semesters, and is delivered fully online. Each module includes 25 hours of live sessions, taught in real time and available to rewatch afterwards, within around 75 hours of total study per module, combining live teaching with independent work.

Learning aims

What you will be able to do

By the end of the programme, graduates will be able to:

—Apply the core principles and vocabulary of data protection with confidence.

—Identify the correct legal basis for any given processing of personal data.

—Uphold and respond to the rights of data subjects in practice.

—Perform the duties of a Data Protection Officer within an organisation.

—Assess and strengthen the security of personal data.

—Manage international data transfers lawfully and safely.

—Address the privacy challenges raised by artificial intelligence and emerging technology.

—Complete an original research project on a real data-protection question.

Admissions

Access requirements

The programme is open to graduates from a range of relevant disciplines. Data protection sits at the meeting point of law, technology and governance, and we welcome candidates from backgrounds including law, information technology, data science, cybersecurity, business and administration, compliance, and public administration, among others.

IA completed undergraduate degree, or an equivalent qualification or professional experience judged to be of equal standing.

IIA genuine interest in privacy, law and governance, set out in a short statement of interest.

IIIProficiency in English sufficient to study at postgraduate level.

IVAn analytical, detail-oriented approach suited to a field where precision matters. No prior legal qualification is required.

Admission is selective and considered on the whole of each application. We look for candidates with the rigour and discipline to master a demanding specialist field and to take responsibility for it.

Careers

Where it can take you

Data protection expertise is in structural, growing demand: the Data Protection Officer role is a legal requirement for many organisations, and privacy skills are valued across every sector. Graduates are positioned to move toward positions such as:

Data Protection Officer Data Protection Manager Privacy Officer Compliance Officer Data Protection Auditor AI Governance Officer Legal Counsel (Privacy) Information Security & Governance Lead Privacy Consultant Head of Risk & Compliance

The role is relevant everywhere personal data is handled, from technology, finance and healthcare to the public sector, making it one of the most portable and resilient career paths available today.

Our approach

Designed for the age of AI

Like all our programmes, this master is built on three principles: learning to use artificial intelligence with judgement, developing the human skills that set professionals apart, and preparing for the roles that will hold their value as the world changes.