Overview

This course addresses the need identified within the consortium for training and the acquisition of legal knowledge accessible to non-lawyers, aimed at understanding and applying data protection and cybersecurity legislation to the technological and logistical ecosystem of the Nexus Project. The course aims to equip professionals from any field with fundamental legal knowledge on data protection and cybersecurity, with a focus on the NIS2 Directive and the GDPR, tailored to the context of the Nexus Agenda. It is intended for technicians, project managers, digital systems managers, and other professionals in the fields of logistics, transport, and technology, as well as any other professionals interested in the topic

Learning outcomes

• Describe the national and European Union legal framework, including the concepts of Constitution, law, decree-law, directive, and regulation.
• Explain the essential principles and concepts of personal data protection in light of the GDPR, including the rights of data subjects and the responsibilities of data controllers.
• Interpret the fundamental concepts of cybersecurity, recognizing the main cyber threats and their legal relevance in strategic sectors, with special emphasis on critical infrastructures and the port sector.
• Identify and describe the main national and international bodies involved in data protection and cybersecurity, as well as the services they provide (e.g., CNCS, CNPD, PJ Cybercrime Office, ENISA).
• Understand the landscape of the most relevant rules regarding cybersecurity, as well as the historical development of the topic in the European and Portuguese contexts.
• Apply the acquired legal knowledge to promote good practices in legal compliance and information security in the context of digital and logistics operations within the Nexus Project.

Content

• Contextualization of the topic
• Regulatory framework: foundations of European Union law and the Portuguese legal
• system
• Legal framework for personal data protection
• Cybersecurity: fundamental concepts, cyber threats, critical infrastructures, and legal
• implications
• Institutions and competencies in the field of cybersecurity and data protection
• Legal instruments and legislative developments in cybersecurity in Portugal and the European Union