Master in Digital Law, Compliance, and Artificial Intelligence

This topic covers the regulatory environment that shapes the digital economy and builds a global perspective for interpreting the main European regulations with confidence. This block enables you to operate with sound judgment within a constantly evolving legal framework and to anticipate the impact of new regulatory initiatives on professional activity.

Information technology law vs. LegalTech Content and scope of new technologies law Legal framework of EU digital law International regulatory outlook and comparative digital law Digital Services Act (DSA) and Digital Markets Act (DMA)

Electronic signature: types and regulation eIDAS2 and self-sovereign identity Data Act and non-personal data Digital rights Business case

This section builds the foundations needed to operate online with legal certainty and to validate digital projects from a legal perspective, covering both online presence and commercial communications. It makes it easier to identify common risks and to set up the correct legal configuration for websites and digital business models.

Information society and e-commerce The information service provider Commercial communications P2P networks, linking and deep linking, content indexing

Digital due diligence Audits and website legal texts (legal notice, privacy policy, cookies) E-business and consumer law Business case

The content of this unit is aimed at integrating data protection as a strategic element within the organization, beyond formal compliance. It provides tools to manage data processing appropriately, respond to risks, and ensure proper GDPR alignment in practice. It also includes references to international regulations and a comparative law approach.

Data protection regulations and their evolution GDPR principles for data processing. Legal bases Exercise of ARSOPOL rights by data subjects Data processors and data transfers

International data transfers Data protection officer, record of processing activities, and impact assessments Implementation of policies and audits Data protection challenges for new technologies Business case

This section addresses the protection of rights in digital environments, providing criteria for reconciling the use of technologies with fundamental rights. This content enables balanced decisions that combine innovation, corporate oversight, and respect for individual rights.

Introduction to digital identity Right to honor, dignity, and one's own image Right to information, freedom of expression, and other personality rights Rights and safeguards in the digital world Right to privacy and to one's own image Right to digital disconnection

Digital rights in collective bargaining Limits on monitoring and surveillance measures Information security measures in employment relationships Internal remote work policies and work equipment Business case

This topic provides a foundation for understanding how to manage information security from a legal standpoint, from prevention through to incident response. It enables you to design compliance strategies that reduce exposure to risk and potential legal liability in increasingly exposed environments.

Regulatory framework of information security NIS2 and Esquema Nacional de Seguridad (ENS) ISO 27001 and applicable standards Risk analysis and state of the art

Security breaches Incident management and notification procedures Legal liability Business case

The content focuses on maximizing the value of digital assets, covering the protection of intangible assets such as patents, trademarks, copyright, and trade secrets, and providing useful criteria for structuring contracts, protecting technological developments, and managing rights appropriately. In addition to technology contracting, it includes technology transfer provisions and the contractual models associated with digital services.

Intellectual and industrial property Copyright in the digital environment Trade secrets Unfair competition Software and licenses

Technology contracting and technology transfer Contracting SaaS models Business case

This section analyzes the legal impact of emerging technologies such as blockchain on business models, making it easier to understand evolving regulatory environments and to identify the risks associated with their implementation.

Tokenization of digital assets Types of tokens

Analysis of the MiCA Regulation Evidentiary procedure with blockchain-based evidence

This topic provides the knowledge needed to understand how artificial intelligence works and how it is applied, so you can advise, decide, and implement solutions on a solid technical and legal foundation. It makes it easier to identify legal implications early in the development of AI-based solutions.

How AI works Concept and types of AI Evolution and current landscape of AI Differences between AIs

Machine learning, deep learning, and neural networks Fields and life cycle of an AI project Generative AI Business case

The content enables you to interpret the European regulatory framework, in particular the AI Act, from a practical perspective, making it easier to classify AI systems and determine the applicable obligations based on their level of risk.

Evolution of international and European regulation on artificial intelligence. Principles and structure of the European regulatory framework on AI (AI Act) AI regulation at the European level (AI Act) High-risk, limited-risk, and minimal-risk systems Digital Omnibus Package

International comparative law on AI Transparency and information obligations in AI systems AI, data protection, and biometric recognition Challenges and future of AI legislation Business case

This section addresses the specific legal implications of generative AI, particularly in relation to intellectual property, data use, and the resulting liabilities. It is key to understanding the risks associated with its use in professional environments.

Introduction to generative AI AI and intellectual property: authorship, originality, and ownership. Protection and traceability of training data Data mining exception (DMT)

Protection of a work created by generative AI systems Obligations for generative AI providers Identification and management of legal risks associated with corporate use of generative tools

This topic addresses the specific legal implications of generative AI, particularly in relation to intellectual property, data use, and the resulting liabilities. It is key to understanding the risks associated with its use in professional environments.

Fundamental principles: transparency, fairness, explainability, human oversight, and non-discrimination Algorithmic bias: identification, prevention, and mitigation mechanisms Governance systems Liability of AI developers and providers

Civil and criminal liability arising from the use of AI Challenges and future of AI regulation and governance AI ethics Business case

This content provides an understanding of the role of compliance in digitalized environments, moving from a traditional approach toward models adapted to technology risks. It offers a strategic view of the compliance function within organizations, integrating aspects of corporate culture, ethics, and governance, and makes it possible to identify the main trends and challenges arising from digitalization and the use of new technologies.

Concept and evolution The transformation of compliance The role of the Compliance Officer (CO) Differences between traditional compliance and digital compliance Corporate culture and ethics

Technology governance The strategic role of the compliance officer National and international regulatory framework Trends: digitalization, AI, and new risks Business case

This topic covers the design and implementation of compliance systems based on international standards, making it easier to integrate them into the organizational structure. It provides a practical framework for rolling out, overseeing, and continuously improving compliance programs, as well as for generating evidence and reporting, aligning control models with best practices and regulatory requirements.

Compliance management systems Designing the organization and control model Implementing compliance programs ISO 37301 - Compliance Management Systems UNE 19601 - criminal compliance management systems

Integration with ISO 27001 - Information Security Management Systems (ISMS) Auditing and continuous improvement Evidence and reporting Business case

This section provides tools to identify, assess, and manage technology risks from an integrated governance, risk, and compliance (GRC) perspective. It shows how to structure appropriate control models, define monitoring indicators, and establish continuous monitoring mechanisms, supporting decision-making in complex digital environments.

Governance, risk, and compliance (GRC) Technology risks and compliance risks Risks associated with cloud systems and third parties Identifying and assessing digital risks

Risk methodologies and matrices Technology risk maps Preventive and corrective controls Indicators and continuous monitoring Business case

This unit focuses on preventing criminal risks in digital environments, providing criteria for designing effective prevention models. It builds an understanding of the legal implications of technology crimes and the liability of organizations and their governing bodies, and shows how to apply this knowledge to real situations through the analysis of cases and case law.

Criminal liability of legal entities Criminal prevention models Computer crime and cybercrime Crimes involving data and systems Cybercrime and the new criminal paradigm in digital environments Types of cybercrime

Investigation, prosecution of cybercrimes, and practical issues Competent authorities and proceedings Case studies and case law Liability of directors and executives Business case

This topic brings together the content covered in the data protection and cybersecurity topics within compliance systems, offering a coordinated view that makes it possible to effectively manage the risks associated with information processing. It supports the implementation of appropriate measures, incident response, and the proper positioning of the DPO role within the organization.

Integrating the GDPR into compliance programs Privacy and accountability principles Security breaches and incident response The role and duties of the DPO

Compliance and cybersecurity: a coordinated model Third-party management and international transfers Impact assessments (DPIA) Business case

The content of this unit addresses the governance of artificial intelligence systems from a compliance perspective, identifying regulatory risks and legal requirements. It provides criteria for ensuring responsible use of AI within the organization, covering aspects such as transparency, human oversight, and the obligations arising from the AI Act.

Governance of AI systems Regulatory risks of AI Bias, transparency, and explainability Human oversight

The European AI Act Responsible corporate use of generative AI Business case

This section shows how technology is redefining the legal sector and how to leverage it to deliver services that are more efficient, more competitive, and aligned with new market demands.

Introduction to LegalTech Law and innovation Types of tools (automation, AI, legal marketplaces)

Impact on law firms and legal advisory practices Industry trends

This block focuses on optimizing the legal function through more efficient, results-oriented management. It shows how to turn legal departments into strategic areas within the organization.

The concept of Legal Operations Legal project management (LPM) Optimizing legal processes

KPIs and metrics in legal departments Managing legal vendors

This topic covers the methodologies applicable to the legal field that make it possible to plan, execute, and control legal projects in a structured way, improving the management of resources and risks.

Project analysis and architecture Analysis, identification, and management of project risks System design and service design Project planning and execution

Applying the OKR methodology to digital projects Aligning organizational practice with the firm's strategy and culture Business case

This content shows how to improve the way legal services are communicated and delivered, making them clearer, more accessible, and focused on the user experience.

User-centered design applied to law Visual Law and simplifying legal language UX/UI in legal services

Prototyping legal solutions Legal design case studies

This topic supports the adoption of technology solutions to optimize the drafting of legal documents, reducing repetitive tasks without losing control over content or legal risk, while reinforcing the quality of legal work.

Document automation (legal playbooks) Contract Lifecycle Management (CLM) Legal benefits and risks

Integration with enterprise tools Business case

This block covers and applies the main LegalTech tools used in legal practice today, driving the digital transformation of professional practice and optimizing key legal work processes.

Contract management and automation: HighQ, Ariba (SAP), Ironclad/Icertis/ContractPodAI, DocuSign CLM Document and knowledge management: iManage, Relativity, Airtable, etc. eDiscovery and analytics (data exploitation): DISCO, Copilot premium, etc.

Legal Analytics: PowerBI, Qlick, Tableau, etc. Process automation: Power Automate, ServiceNow, JIRA, etc. Privacy and risk management (Digital Compliance): One Trust (and its various modules), Archer, TrustArc, etc. GenAI for lawyers: Harvey, Copilot, Gemini

This block identifies and assesses the use of artificial intelligence–based tools in legal practice, supporting their effective integration into daily work and improving professional legal efficiency.

Why AI matters for lawyers Main use cases Drafting and reviewing contracts Regulatory analysis Legal research

Knowledge management Report generation Limitations and risks: real cases AI agents for legal practice Case studies

*The content of the master is based on the Spanish and European Union legal systems, providing a solid, pioneering, and internationally recognized frame of reference. Since European regulation is among the most advanced and developed on the international stage, this approach allows students to acquire knowledge that is applicable and comparable in other legal systems.

---