Biography of the Professor
Assistant Professor in the Department of Criminology and Security Sciences, an author of two books and over 25 other scholarly publications concerning economic crimes. His research focuses on economic crimes, whote collar crimes, environmental crimes, criminology. He also works as a legal advisor and manages consulting limited liability company.

Requirements for passing a course
Written exam. Two questions from the list below. 50% to pass, 70% for B, 90% for A.

Exam questions
Data Classification 
Classification of Information 
History of Data and Information Protection 
Principles of Information Protection 
Risk Management Information Protection as a Process 
Laws and Regulations Governing Information Protection  
Policies and Procedures for Protecting Data and Information 
Best Practices for Protecting Critical Business Data and Information 
Sources of Standards for Data and Information Protection 
Crimes Against Data and Information Protection 
Types of Data Theft 
EU General Data Protection Regulation 
Reporting Data and Information Security Breaches 
Documentation Required for Personal Data and Information Processing 
Business Databases Registration 
General Inspector for Personal Data Protection 
Physical and Environmental Protection 
Technical Security Controls 
Information Security Audit 
Bases of Personal Data Processing 
Entrustment of Data Processing 
Transfer of Personal Data Abroad 
Responsibility for Personal Data Processing 
Polish act on the Protection of Personal Data

Sources

Books
Preston De Guise, Data Protection. Ensuring Data Availability, Routledge 2017
P. Carey, Data Protection: A Practical Guide to UK and EU Law, Oxford 2015
Paul Voigt, Axel von dem Bussche, The EU General Data Protection Regulation (GDPR): A Practical Guide, Springer 2017

Regulations
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
Act of August 29, 1997 on the Protection of Personal Data