Master’s in Ethics, Privacy and Security Engineering in Digital Health
Online master's programme of 1,900 hours in ethics, privacy and security engineering in digital health. 12 modules covering digital health ethics, health data protection, privacy by design, secondary use of data, healthcare cybersecurity, secure health software, incident management, responsible AI, governance and compliance, and digital patient rights, with an assigned technical tutor.
Master’s in Ethics, Privacy and Security Engineering in Digital Health — studying from Australia
Health technology and biomechanics are growing areas in Australia, supported by a strong medical research sector and an established medical device industry. Wearable devices and occupational safety systems are increasingly used in mining, construction and healthcare. Medical devices are regulated nationally, requiring engineers to understand conformity, risk management and clinical evaluation. Employers include medical device manufacturers, hospitals, research institutes such as those affiliated with universities, and workplace safety consultancies.
Fees for Australia: A$11,000 (AUD), with instalments and employer sponsorship available.
Relevant bodies in Australia
Typical roles
Questions from Australia
Will a SEIUM qualification be recognised by Engineers Australia or other professional bodies for this area?
SEIUM qualifications are private qualifications and are not accredited by Engineers Australia or any other national body. Recognition is decided by individual employers and, where relevant, by the professional body assessing your application. Engineers Australia assesses skills and experience independently, so check directly with the body you hope to join before enrolling.
Which Australian employers might value this training in health, biomechanics or wearable safety work?
Employers in Australian medical device firms, rehabilitation services, workplace health and safety teams and wearable technology companies may consider advanced engineering training when hiring. Whether they value a private qualification depends on each employer's own policy and on your existing experience. Speaking with prospective employers about how they view private qualifications is a sensible step.
Can I study this alongside full-time work in Australia, and is employer funding possible?
The programmes are 100% online and taught in English, so you can study from any time zone, including Australian time zones, around your work hours. Fees are payable in instalments, and employer sponsorship is possible; ask your employer whether they fund training. Plan for the workload of 300 to 1,900 hours depending on the programme, and confirm the schedule with SEIUM.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Apply bioethical principles to digital health projects.
Comply with the GDPR and Spanish regulations when processing health data.
Design solutions with privacy by design.
Manage the secondary use of data within the EHDS.
Protect healthcare organisations and software against cyber threats.
Assess healthcare AI against responsibility criteria.
Implement governance and compliance models.
Who it's for
- Data protection officers in hospitals, health services and digital health companies.
- Health information security managers.
- AI ethics consultants advising on clinical algorithms.
- Regulatory compliance auditors.
- Healthcare cybersecurity analysts.
- Data governance managers.
- Engineering or science graduates seeking to enter hospitals and health services.
What you'll work with
- Regulation (EU) 2016/679 (GDPR, data protection)
- Organic Law 3/2018 (LOPDGDD, Spanish data protection and digital rights law)
- Regulation (EU) 2024/1689 (EU Artificial Intelligence Act)
- Directive (EU) 2022/2555 (NIS2, network and information security)
- Royal Decree 311/2022 (Spanish National Security Framework, ENS)
- ISO/IEC 27001 (information security management)
- ISO 27799 (information security in health)
- Regulation (EU) 2025/327 (European Health Data Space)
- PILAR
- OWASP Threat Dragon
- ARX Data Anonymization Tool
- Microsoft Purview
- Wireshark
12 modules · 1900 h
1.1Bioethical principles applied to technology1.2Autonomy, beneficence, non-maleficence and justice1.3Ethics of health data1.4Patient trust in digital systems1.5Digital divide and equity1.6Ethics of AI in health1.7Conflicts of interest in health technology1.8Clinical and research ethics committees1.9Landmark ethical cases1.10Case study: ethical dilemma of a contact-tracing app
2.1GDPR and special categories of data2.2LOPDGDD and provisions on health research2.3Legal bases for health data processing2.4Data subject rights2.5Data protection officer in health2.6Record of processing activities2.7Processors and international transfers2.8AEPD sanctioning regime2.9Relevant AEPD rulings2.10Workshop: record of processing activities for a hospital
3.1Principles of privacy by design3.2Data protection impact assessments (DPIA)3.3Data minimisation and purpose limitation3.4Pseudonymisation and anonymisation3.5Re-identification risk3.6Differential privacy in health statistics3.7Generation of synthetic patient data3.8Confidential computing and secure enclaves3.9Dynamic consent management3.10Practical: DPIA of a telemonitoring platform
4.1Research with health data4.2Law 14/2007 and biological samples4.3Secondary use under the EHDS4.4Health data access bodies4.5Secure processing environments4.6Data altruism4.7Biobanks and genetic data4.8Governance of federated data4.9Transparency towards citizens4.10Case study: data access application for research
5.1Threat landscape in the health sector5.2Ransomware in hospitals5.3National Security Framework (ENS) in public centres5.4The NIS2 Directive and health entities5.5ISO 27001 and 277995.6Medical device security5.7IEC 80001-1 medical networks5.8Professional access to health records5.9Staff awareness5.10Laboratory: analysis of a ransomware incident
6.1IEC 81001-5-1 processes for health software6.2MDCG 2019-16 for manufacturers6.3Privacy-centred threat modelling6.4Secure development and OWASP6.5SBOM and vulnerabilities6.6Penetration testing of health applications6.7Cyber Resilience Act6.8Patch management in devices6.9Coordinated vulnerability disclosure6.10Practical: STRIDE threat modelling of a health app
7.1Incident response plan7.2Breach notification to the AEPD7.3NIS2 notification to the CSIRT7.4Continuity of care during cyberattacks7.5Backup and recovery7.6Digital forensic analysis of the incident7.7Communication with patients7.8Lessons learned after a cyber incident7.9Cybersecurity exercises7.10Case study: hospital cyberattack drill
8.1Regulation (EU) 2024/1689 and high risk8.2Managing algorithmic bias8.3Explainability and transparency8.4Effective human oversight of AI8.5Fundamental rights impact assessment8.6WHO ethical guidance8.7Independent algorithmic auditing8.8Liability for damage8.9Model documentation8.10Workshop: ethical audit of a triage algorithm
9.1Data governance models9.2ISO 27701 management systems9.3Integrated regulatory compliance9.4Privacy audits9.5Technology procurement and contracts9.6Supplier assessment9.7Compliance indicators9.8Training and culture9.9Accountability9.10Practical: compliance plan for a digital health supplier
10.1Law 41/2002 and information rights10.2Access to the health record10.3Spanish Charter of Digital Rights10.4Digital accessibility of health services10.5Health apps and consumers10.6Advertising and digital health10.7Neurorights and neural data10.8Right to explanation10.9Patient participation10.10Case study: patient portal and its rights
11.1Telemedicine and privacy11.2Wearables and wellness data11.3Genomics and sensitive data11.4Medical imaging and AI11.5Digital mental health11.6Insurers and data use11.7Employers and health data11.8Decentralised clinical research11.9Public health and surveillance11.10Case study: analysis of a corporate wearable
12.1Digital health project under analysis12.2Ethical analysis of the project12.3Data protection analysis12.4Cybersecurity assessment12.5Responsible AI analysis12.6Governance proposal12.7Compliance plan12.8Recommendations and roadmap12.9Master's Thesis report12.10Master's Thesis: defence before a panel
How you'll learn
100% online training on the SEIUM campus, with downloadable materials, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so the programme is compatible with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is PILAR, OWASP Threat Dragon, ARX Data Anonymization Tool, Microsoft Purview and Wireshark, in free, academic or evaluation versions. Practical work is based on real procedures: data protection impact assessments, cyber incident drills and ethical audits of algorithms. Assessment is continuous by module, plus the final Master's Thesis.
Standards covered: Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, Regulation (EU) 2024/1689 on artificial intelligence, Directive (EU) 2022/2555 (NIS2), Royal Decree 311/2022 (National Security Framework), ISO/IEC 27001, ISO 27799, Regulation (EU) 2025/327 on the European Health Data Space.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- University degree in engineering, science or architecture, or equivalent demonstrable professional experience.
- Internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with PILAR, OWASP Threat Dragon, ARX Data Anonymization Tool, Microsoft Purview and Wireshark, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.
A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the software, and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Master’s in Biosensors and Biosignal Processing Engineering
Online master's programme of 1,900 hours in biosensor engineering and biosignal processing. 12 modules covering electrochemical and optical biosensors, biopotential acquisition, ECG, EEG, EMG and PPG…
Master’s in Medical Devices, Software & Regulation Engineering
Online master's programme of 1,900 hours in medical device, software and regulatory engineering. 12 modules covering the MDR, ISO 13485 quality management, ISO 14971 risk management,…
Master’s in Special Transport Environments Engineering
Online master's programme of 1,900 hours in special transport environments engineering. 12 modules covering risk factors in special environments, ground and air medical transport, tunnels and…
More in Health, Biomechanics, Wearables & Operational Safety
All Health, Biomechanics, Wearables & Operational Safety programmes → · How to apply · Fees & financing · Scholarships