Postgraduate Diploma in Security and Privacy of Clinical Records
Online 800 h Postgraduate Diploma in Security and Privacy of Clinical Records. 8 modules covering Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD) and Microsoft Purview. Assigned tutor and open enrolment.
Postgraduate Diploma in Security and Privacy of Clinical Records — studying from Ireland
Ireland is a significant centre for medical technology and pharmaceuticals, with many international device manufacturers and a strong cluster of biomedical research in Galway, Limerick and Dublin. Biomechanics, wearable sensing and occupational health technologies are developed by companies, hospitals and research institutes such as the National University of Ireland Galway's research groups. Engineers in this area design medical devices, rehabilitation systems and safety monitoring solutions under strict regulatory requirements. Oversight comes from the Health Products Regulatory Authority and the Health and Safety Authority.
Fees for Ireland: €1,090 (Euro), with instalments and employer sponsorship available.
Relevant bodies in Ireland
Typical roles
Questions from Ireland
Will this qualification be recognised by professional bodies in Ireland for this area?
SEIUM's qualifications are private qualifications, not official state degrees, and they are not accredited by any national body. Recognition is decided by individual employers or the relevant body. In Ireland, engineers in this field may look to Engineers Ireland for professional membership, but completing a SEIUM programme does not by itself grant membership of any body. Check requirements directly with the body concerned before enrolling.
How might this training be used by employers in Ireland working in this area?
Employers in Ireland decide for themselves how much weight to give a private online qualification. Many assess it alongside your existing experience, the final project and your portfolio. Roles in medical devices, occupational health and workplace safety may value specialist knowledge, but there is no guarantee of recognition or of any salary or promotion outcome. Ask prospective employers whether they would accept the qualification.
Can I study this alongside a full-time job, and does my employer need to fund it?
Programmes are fully online and taught in English, so you can study from home at your own pace around work. Master's programmes are 1,900 hours, postgraduate diplomas 800 hours and specialist courses 300 hours, so plan your weekly commitment accordingly. Fees can be paid in instalments, and employer sponsorship is possible if your company agrees. Each student is assigned a technical tutor for support.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Describe the content, uses and custodians of the clinical record.
Apply GDPR principles to the processing of health data.
Safeguard patient rights of access, rectification and information.
Design a role-based access control model based on the clinical relationship.
Implement technical security measures in line with the ENS and ISO 27799.
Establish safeguards for sharing clinical information between centres.
Prepare a privacy and security project for a clinical record system.
Who it's for
- Healthcare data protection officer wishing to specialise in Security and Privacy of Clinical Records.
- Information security manager in healthcare wishing to specialise in Security and Privacy of Clinical Records.
- Auditor of clinical information systems wishing to specialise in Security and Privacy of Clinical Records.
- Privacy consultant wishing to specialise in Security and Privacy of Clinical Records.
- Clinical documentation manager wishing to specialise in Security and Privacy of Clinical Records.
- Security architect for the EHR wishing to specialise in Security and Privacy of Clinical Records.
- Engineering or science graduates seeking to enter the public and private healthcare sectors.
What you'll work with
- Regulation (EU) 2016/679 (GDPR)
- Organic Law 3/2018 (LOPDGDD)
- Law 41/2002 on Patient Autonomy
- Royal Decree 311/2022 (National Security Scheme)
- ISO 27799 (Information Security in Health)
- ISO/IEC 27001
- ISO/IEC 27701 (Privacy Information Management)
8 modules · 800 h
1.1Concept and minimum content1.2Law 41/2002 on patient autonomy1.3Electronic health record1.4Digital Health Record of the SNS1.5Clinical reports and documents1.6Ownership and custody1.7Retention and time limits1.8Regional regulation on clinical documentation1.9Nursing and other professional records1.10Case study: analysis of the content of a clinical record
2.1GDPR principles2.2Legal bases for healthcare processing2.3Duty of professional confidentiality2.4Record of processing activities2.5Processors2.6International transfers of clinical data2.7Research and additional provision 17 of the LOPDGDD2.8Processing of genetic data2.9Minors and persons with disabilities2.10Workshop: record of processing activities for a clinical service
3.1Right of access to the record3.2Subjective annotations by the professional3.3Rectification and erasure3.4Access by relatives and deceased persons3.5Right to data portability3.6Objection and restriction3.7Informed consent and its recording3.8Patient health folder3.9Managing requests3.10Practice: responding to access requests
4.1Need-to-know principle4.2Profiles by professional category4.3Access based on the clinical relationship4.4Emergency access4.5Audit logs4.6Proactive access auditing4.7Improper access and penalties4.8AEPD rulings in healthcare4.9Access to data of employees who are also patients4.10Laboratory: access auditing with detection rules
5.1National Security Scheme in the EHR5.2Encryption and backups5.3Availability and continuity5.4Signature and time stamping5.5Integrity of clinical documents5.6Certified digitisation of paper records5.7Archiving and migration5.8Security on shared workstations5.9Mobility and devices5.10Practice: risk analysis of an EHR module
6.1Interoperability between centres6.2Regional shared clinical record6.3Interoperable electronic prescription6.4European Patient Summary6.5MyHealth@EU cross-border services6.6Sharing consents6.7Concealment of sensitive information6.8Secondary use and the EHDS6.9Anonymisation for research6.10Case study: designing a consent model for sharing
7.1Information security committee7.2Data protection officer7.3Impact assessment7.4Staff training7.5Data breaches and notification7.6Compliance audits7.7Internal acceptable use policies7.8Control of technology suppliers7.9Privacy indicators7.10Workshop: managing a confidentiality breach
8.1Centre context8.2Map of processing8.3Risk analysis8.4Access model8.5Rights procedure8.6Audit plan8.7Training plan8.8Privacy compliance indicators8.9Report and presentation8.10Final review with the tutor
How you'll learn
Fully 100 % online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: students progress at their own pace within the intake, which makes it possible to combine study with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Microsoft Purview, Keycloak, Splunk, PILAR (CCN-CERT), Advanced Excel, in free, academic or evaluation versions. Practical cases are based on real procedures: data protection impact assessments, review of clinical record access logs, and risk analysis using the MAGERIT methodology. Assessment is continuous by module plus the final integrating project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Describe the content, uses and custodians of the clinical record.
Apply GDPR principles to the processing of health data.
Safeguard patient rights of access, rectification and information.
Design a role-based access control model based on the clinical relationship.
Implement technical security measures in line with the ENS and ISO 27799.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. No university degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 800 hours in total, spread over 6 to 8 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
Work is carried out with Microsoft Purview, Keycloak, Splunk, PILAR (CCN-CERT), Advanced Excel. Free, academic or evaluation versions are used, and the tutor indicates the open-source alternative where one exists.
A SEIUM own diploma upon passing the continuous assessment and the final integrating project. It is in-house training, not an official Ministry qualification.
Yes. Modules passed in a course or diploma in the same area are recognised in the higher programme. Check the recognition policy when you enrol.
Related programmes
Postgraduate Diploma in Life Cycle Testing and Electrical Safety
Online 800-hour Postgraduate Diploma in Life Cycle Testing and Electrical Safety. 8 modules covering IEC 60601-1 (safety of medical electrical equipment), IEC 62368-1 (safety of ICT…
Diploma in Theory of Constraints (TOC) and Pull Flow
600-hour online postgraduate diploma in the Theory of Constraints and pull flow: five focusing steps, throughput accounting, drum-buffer-rope, replenishment, critical chain and thinking processes, with an…
Diploma in Factory Ramp-Up: PPAP, MP&L and Day-1 Control
Online postgraduate diploma of 800 hours in factory ramp-up: PPAP, MP&L and Day-1 control. 8 modules covering fundamentals, the regulatory framework (Regulation (EU) 2017/745 (MDR), ISO…
More in Health, Biomechanics, Wearables & Operational Safety
All Health, Biomechanics, Wearables & Operational Safety programmes → · How to apply · Fees & financing · Scholarships