Postgraduate Diploma in Security and Privacy of Clinical Records
Online 800 h Postgraduate Diploma in Security and Privacy of Clinical Records. 8 modules covering Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD) and Microsoft Purview. Assigned tutor and open enrolment.
Postgraduate Diploma in Security and Privacy of Clinical Records — studying from Australia
Health technology and biomechanics are growing areas in Australia, supported by a strong medical research sector and an established medical device industry. Wearable devices and occupational safety systems are increasingly used in mining, construction and healthcare. Medical devices are regulated nationally, requiring engineers to understand conformity, risk management and clinical evaluation. Employers include medical device manufacturers, hospitals, research institutes such as those affiliated with universities, and workplace safety consultancies.
Fees for Australia: A$1,740 (AUD), with instalments and employer sponsorship available.
Relevant bodies in Australia
Typical roles
Questions from Australia
Will a SEIUM qualification be recognised by Engineers Australia or other professional bodies for this area?
SEIUM qualifications are private qualifications and are not accredited by Engineers Australia or any other national body. Recognition is decided by individual employers and, where relevant, by the professional body assessing your application. Engineers Australia assesses skills and experience independently, so check directly with the body you hope to join before enrolling.
Which Australian employers might value this training in health, biomechanics or wearable safety work?
Employers in Australian medical device firms, rehabilitation services, workplace health and safety teams and wearable technology companies may consider advanced engineering training when hiring. Whether they value a private qualification depends on each employer's own policy and on your existing experience. Speaking with prospective employers about how they view private qualifications is a sensible step.
Can I study this alongside full-time work in Australia, and is employer funding possible?
The programmes are 100% online and taught in English, so you can study from any time zone, including Australian time zones, around your work hours. Fees are payable in instalments, and employer sponsorship is possible; ask your employer whether they fund training. Plan for the workload of 300 to 1,900 hours depending on the programme, and confirm the schedule with SEIUM.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Describe the content, uses and custodians of the clinical record.
Apply GDPR principles to the processing of health data.
Safeguard patient rights of access, rectification and information.
Design a role-based access control model based on the clinical relationship.
Implement technical security measures in line with the ENS and ISO 27799.
Establish safeguards for sharing clinical information between centres.
Prepare a privacy and security project for a clinical record system.
Who it's for
- Healthcare data protection officer wishing to specialise in Security and Privacy of Clinical Records.
- Information security manager in healthcare wishing to specialise in Security and Privacy of Clinical Records.
- Auditor of clinical information systems wishing to specialise in Security and Privacy of Clinical Records.
- Privacy consultant wishing to specialise in Security and Privacy of Clinical Records.
- Clinical documentation manager wishing to specialise in Security and Privacy of Clinical Records.
- Security architect for the EHR wishing to specialise in Security and Privacy of Clinical Records.
- Engineering or science graduates seeking to enter the public and private healthcare sectors.
What you'll work with
- Regulation (EU) 2016/679 (GDPR)
- Organic Law 3/2018 (LOPDGDD)
- Law 41/2002 on Patient Autonomy
- Royal Decree 311/2022 (National Security Scheme)
- ISO 27799 (Information Security in Health)
- ISO/IEC 27001
- ISO/IEC 27701 (Privacy Information Management)
8 modules · 800 h
1.1Concept and minimum content1.2Law 41/2002 on patient autonomy1.3Electronic health record1.4Digital Health Record of the SNS1.5Clinical reports and documents1.6Ownership and custody1.7Retention and time limits1.8Regional regulation on clinical documentation1.9Nursing and other professional records1.10Case study: analysis of the content of a clinical record
2.1GDPR principles2.2Legal bases for healthcare processing2.3Duty of professional confidentiality2.4Record of processing activities2.5Processors2.6International transfers of clinical data2.7Research and additional provision 17 of the LOPDGDD2.8Processing of genetic data2.9Minors and persons with disabilities2.10Workshop: record of processing activities for a clinical service
3.1Right of access to the record3.2Subjective annotations by the professional3.3Rectification and erasure3.4Access by relatives and deceased persons3.5Right to data portability3.6Objection and restriction3.7Informed consent and its recording3.8Patient health folder3.9Managing requests3.10Practice: responding to access requests
4.1Need-to-know principle4.2Profiles by professional category4.3Access based on the clinical relationship4.4Emergency access4.5Audit logs4.6Proactive access auditing4.7Improper access and penalties4.8AEPD rulings in healthcare4.9Access to data of employees who are also patients4.10Laboratory: access auditing with detection rules
5.1National Security Scheme in the EHR5.2Encryption and backups5.3Availability and continuity5.4Signature and time stamping5.5Integrity of clinical documents5.6Certified digitisation of paper records5.7Archiving and migration5.8Security on shared workstations5.9Mobility and devices5.10Practice: risk analysis of an EHR module
6.1Interoperability between centres6.2Regional shared clinical record6.3Interoperable electronic prescription6.4European Patient Summary6.5MyHealth@EU cross-border services6.6Sharing consents6.7Concealment of sensitive information6.8Secondary use and the EHDS6.9Anonymisation for research6.10Case study: designing a consent model for sharing
7.1Information security committee7.2Data protection officer7.3Impact assessment7.4Staff training7.5Data breaches and notification7.6Compliance audits7.7Internal acceptable use policies7.8Control of technology suppliers7.9Privacy indicators7.10Workshop: managing a confidentiality breach
8.1Centre context8.2Map of processing8.3Risk analysis8.4Access model8.5Rights procedure8.6Audit plan8.7Training plan8.8Privacy compliance indicators8.9Report and presentation8.10Final review with the tutor
How you'll learn
Fully 100 % online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: students progress at their own pace within the intake, which makes it possible to combine study with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Microsoft Purview, Keycloak, Splunk, PILAR (CCN-CERT), Advanced Excel, in free, academic or evaluation versions. Practical cases are based on real procedures: data protection impact assessments, review of clinical record access logs, and risk analysis using the MAGERIT methodology. Assessment is continuous by module plus the final integrating project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Describe the content, uses and custodians of the clinical record.
Apply GDPR principles to the processing of health data.
Safeguard patient rights of access, rectification and information.
Design a role-based access control model based on the clinical relationship.
Implement technical security measures in line with the ENS and ISO 27799.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. No university degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 800 hours in total, spread over 6 to 8 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
Work is carried out with Microsoft Purview, Keycloak, Splunk, PILAR (CCN-CERT), Advanced Excel. Free, academic or evaluation versions are used, and the tutor indicates the open-source alternative where one exists.
A SEIUM own diploma upon passing the continuous assessment and the final integrating project. It is in-house training, not an official Ministry qualification.
Yes. Modules passed in a course or diploma in the same area are recognised in the higher programme. Check the recognition policy when you enrol.
Related programmes
Postgraduate Diploma in Energy Harvesting (piezo/thermal/solar)
Online 800-hour Postgraduate Diploma in Energy Harvesting (piezo/thermal/solar). 8 modules covering IEC 62830-1 (semiconductor devices for energy harvesting), IEEE 176 (piezoelectricity standards) and COMSOL Multiphysics. Assigned…
Diploma in Dynamic Pricing Models and Elasticity
Online postgraduate diploma of 800 hours in dynamic pricing models and elasticity. 8 modules covering fundamentals, the regulatory framework (Regulation (EU) 2017/745 (MDR), ISO 13485), analysis…
Postgraduate Diploma in BCI and Therapeutic Neurofeedback
Online 800-hour Postgraduate Diploma in BCI and Therapeutic Neurofeedback. 8 modules covering IEC 60601-1 (safety of medical electrical equipment), IEC 60601-2-26 (electroencephalographs) and OpenViBE. Dedicated tutor…
More in Health, Biomechanics, Wearables & Operational Safety
All Health, Biomechanics, Wearables & Operational Safety programmes → · How to apply · Fees & financing · Scholarships