DRC Law, Regulations and Ethics

DRC Law, Regulations and Ethics

  • Course description
    • Course Code
      DRC
    • Level of Study
      5.2
    • Program of Study
      Digital Resilience and Compliance
    • Credits
      15
    • Study Plan Coordinator
      Justine Moodley
Teaching Term(s)
2028 Spring
About the Course

This course gives students knowledge of the laws and regulations that govern digital work in Norway and the EU, and skills to apply them in practice. It introduces legal method and the place of digital security in national security and preparedness.

Students learn IT law and computer crime, privacy and data protection under GDPR, and EU and Norwegian legislation such as the Digital Security Act, NIS2, DORA and the EU AI Act. They find and refer to legal sources, guidance and standards, explain how the law applies to a case and justify their legal assessment. Students turn legal requirements into privacy and security measures, including carrying out a data protection impact assessment, and assess the legal position after a ransomware attack or other incident, including duties to report incidents to authorities. The course also covers ethics and professional conduct, and students discuss ethical and professional dilemmas with others in the field.

Course Learning Outcomes
Knowledge

The candidate:

  • has knowledge of legal method and of IT law, GDPR, NIS2, DORA and other laws that govern digital work
  • can assess their own work in relation to privacy, security and AI legislation, including duties to report incidents
  • can update their knowledge as EU and Norwegian digital legislation develops
  • is familiar with the place of digital security in national security and preparedness
Skills

The candidate:

  • can explain how the law applies to a case and justify their legal assessment
  • can find and refer to legal sources, guidance and standards, and assess their relevance to a case
  • can assess the legal position after a ransomware attack or other incident, and determine what measures need to be taken
General Competence

The candidate:

  • can turn legal requirements into privacy and security measures, including carrying out a data protection impact assessment, in line with professional ethics
  • can work with legal advisers and authorities when handling notification duties after an incident
  • can discuss ethical and professional dilemmas with others in the field and contribute to good practice
Learning Activities

Students use a combination of written content, videos and practical learning activities designed to help them achieve the course learning outcomes.

Industry Relevance
Course content, learning activities and tools reflect industry standards and are developed in collaboration with industry partners and experts from the field.

Practical Work
The course includes regular practical activities where students apply their knowledge and practise relevant skills.

Collaboration
Collaboration is facilitated through the LMS and Teams, and students are encouraged to work together for peer support and shared learning.

Guidance
Teachers are available for guidance at scheduled times. Students are encouraged to share work in progress and use feedback from teachers and fellow students to develop their work further.

 

Work requirements and Assessment

This course has one coursework requirement, graded Approved / Not Approved.

Assessments
Form of assessmentGrading scaleGroupingDuration of assessment
Course Assignment
Grade A-F
Individual
1 Week(s)
Reading List

Teaching materials, reading lists, and essential resources will be shared in the learning platform and software user manuals where applicable.