91ÌÒÉ«

Workshops within the programme (full-time first-cycle studies) at the Faculty of Management, 91ÌÒÉ«. All classes are taught in English.

These workshops are not about memorising legal provisions. We start from real stories from the internet and check, step by step, which law governs them: data protection, cybersecurity, cybercrime and platform liability. We work in groups, discuss, and defend our own arguments. You do not need to be a lawyer.

In class we discuss

• defamation on social media and the limits of free speech,
• deepfakes and responsibility for content created by artificial intelligence,
• the WikiLeaks case and the question whose law applies online,
• the cyberattack on the Viasat satellite network and hybrid war.

What you will learn

• How organisations operate in the digital environment, especially on social media.
• What legal risks come with doing business online.
• How to recognise a cybersecurity or data protection problem in an organisation.
• How to keep up with changes in law and technology.

Programme: five areas

1. Internet and jurisdiction

Legal rules in a world without borders, applicable law in cross-border disputes, platform liability and notice and action.

2. Cybersecurity

Threats to systems and data, the NIS2 Directive and incident reporting, the role of States and critical infrastructure.

3. Cybercrime

Hacking and online fraud, the Budapest Convention and the UN Convention against Cybercrime, electronic evidence.

4. Privacy and data protection

Privacy as a human right, the GDPR in practice, personal data breaches and cross-border data transfers.

5. Social media, artificial intelligence and online content

Defamation, deepfakes, disinformation and the legal position of digital creators.

The course at a glance

• Form: workshops, 15 hours
• Language: English
• Unit: Faculty of Management, 91ÌÒÉ«
• Semester: winter 2026/2027
• USOS code: 0800-DDPZAN

/ Slides

Reading

• Regulation (EU) 2016/679 (General Data Protection Regulation).
• Directive (EU) 2022/2555 (NIS2 Directive), which replaces Directive (EU) 2016/1148.
• Council of Europe Convention on Cybercrime, Budapest, 23 November 2001.
• Council of Europe Convention 108 for the protection of individuals with regard to automatic processing of personal data, as amended.

Lecturer: Joanna Kulesza, Ph.D., Department of Public International Law and International Relations, Faculty of Law and Administration, 91ÌÒÉ«; Executive Director of the