Integration of legal and technological knowledge
FIRST-LEVEL UNIVERSITY MASTER’S DEGREE
First-level university Master’s Degree in Data Protection, Cybersecurity and Digital Forensics
University of Perugia
Department of Law, in collaboration with the Department of Mathematics and Computer Science
- Academic year
- 2025/2026
- Edition
- 4th
- Level
- First level
- Credits
- 60 CFU
- Duration
- 1 academic year
- Teaching
- Live online · assessments in person
- Curricula
- 2
- Application deadline
WHY THIS MASTER
Law and technology, understood together
The Master integrates legal knowledge and technological expertise to address data protection, system security, cybercrime and digital evidence as interconnected fields. A shared foundation links principles, responsibilities, architectures and techniques; the Legal and Technology curricula then allow students to develop expertise suited to their prior education.
Its approach combines university education and professional practice: theory, practical sessions, applied cases, work placements and exchange with lecturers and experts help students understand issues that are inherently interdisciplinary.
Exchange between university lecturers and professional experts
Theory and practice, laboratories, case studies, internships and project work
TWO CURRICULA
Choose the perspective that best matches your background
Both curricula share an integrated legal and technical foundation; each then develops its own distinctive expertise.
01 / LEGAL PERSPECTIVE
Legal Curriculum (cv-IUS)
By the end of the course, students will have developed the ability to analyse, plan, coordinate and monitor the cybersecurity of data, systems and infrastructure, whilst assessing the risks to the confidentiality, integrity and availability of information. These skills will enable them to contribute to the definition and implementation of appropriate technical and organisational measures, as well as to the strategic coordination of information systems, including in relation to the digitisation and digital transformation processes of the public administration and complex organisations.
The Master’s programme will also enable participants to acquire specific skills to understand and manage the various stages of the evidential process concerning digital evidence. Participants will be able to assess the methods for acquiring, preserving and analysing digital evidence, to safeguard its integrity and authenticity, and to correctly interpret the technical findings in light of current legislation and the most recent case-law interpretations in criminal, civil and administrative contexts.
Who it is designed for
Graduates from any first-cycle degree who wish to develop legal, organisational and evidential expertise in data governance, cybersecurity and digital evidence.
- Modules
- 6
- Shared foundation
- 4
- Curriculum-specific
- 2
02 / TECHNOLOGY PERSPECTIVE
Technology Curriculum (cv-INF)
Upon completion of the Master’s programme, students on the technology track will have acquired advanced technical and methodological skills in the fields of cybersecurity and digital forensics, with particular emphasis on the security analysis of networks, systems and applications; the identification and assessment of vulnerabilities; and the collection, correlation and interpretation of technical evidence from information systems and network infrastructure. The skills acquired will enable students to understand the main techniques used to compromise IT systems and to assess the technical risk to the confidentiality, integrity and availability of data and services, whilst consciously integrating the technical-operational perspective with the legal and organisational ones.
The training programme will also enable participants to develop operational skills in the technical management of security incidents (incident handling and DFIR), including log analysis, the reconstruction of event timelines, and support for containment and recovery activities. Finally, participants will be able to document the activities carried out and the results achieved in a clear, structured and rigorous manner, drafting technical reports and executive summaries to support audit activities, security assessments, organisational decision-making processes and any administrative or legal proceedings.
Who it is designed for
Graduates with a computer science or information engineering background—or the credits specified in the call—seeking advanced technical and operational expertise.
- Modules
- 8
- Shared foundation
- 4
- Curriculum-specific
- 4
WHO IT IS FOR
Expertise for complex responsibilities
The Master is open to graduates who meet the requirements of the chosen curriculum and is particularly relevant to professionals working where law, organisations and information systems meet. It does not replace professional or statutory requirements for individual roles.
Enrolment in individual courses and enrolment as an auditor are not available.
Data Protection Officer and governance of processing operations
Digital Transition Manager and organisational transformation
Cybersecurity and risk-management consultancy
Technical consultancy and expert analysis of digital evidence
ADMISSION
Admission requirements
Requirements differ by curriculum. The wording below follows the official call for the 4th edition.
Legal Curriculum (cv-IUS)
Admission to the cv-IUS curriculum is open to graduates holding any first-cycle degree. The application form attached to the call also provides for applicants to document a degree awarded under the former Italian system or a specialist/master’s degree. Holders of qualifications obtained abroad that are recognised as equivalent under current legislation may also apply.
Technology Curriculum (cv-INF)
Admission to the cv-INF curriculum requires a first-cycle degree in class L-31 (Computer Science and Technology) or L-08 (Information Engineering), or in the corresponding former Ministerial Decree 509/99 classes 26 (Computer Science and Technology) or 9 (Information Engineering), or a qualification obtained abroad that is recognised as equivalent under current legislation. Graduates holding a first-cycle degree in another class may be admitted if they have earned at least:
- 45 CFU in the scientific-disciplinary sectors ING-INF/05 or INF/01
- 24 CFU in the sectors MAT/01–MAT/09
Assessment of other degree classes
The Academic Board may also admit holders of degrees in other classes who have proven professional experience in legal disciplines for cv-IUS or in information technology for cv-INF, subject to assessment of their educational and professional record. Applicants holding qualifications obtained abroad must submit a copy of the qualification and the documentation required by the call concerning translation, verification, comparability or a declaration of value.
Qualifications obtained abroad: required documentation
Applicants must attach a copy of the qualification. An official translation is required when the document is not issued in Italian, Spanish, French or English. The call also requires the applicable legalisation and a declaration of value issued by the competent Italian diplomatic mission.
The online application must include the academic transcript (or Diploma Supplement, where available), proof that the qualification is genuine through a CIMEA-NARIC verification statement or legalisation/Apostille, and a statement of comparability issued by CIMEA-NARIC or another ENIC/NARIC centre, or alternatively a declaration of value. For the 55 Lisbon Recognition Convention countries, the call permits the correspondence statement available through the ARDI database.
STRUCTURE
An annual programme worth 60 CFU
The total commitment includes live teaching, practical sessions, work placement and/or project work, and the final examination.
- Total workload
- 1500 hours
- Live lectures
- 174 hours
- Practical sessions
- 106 hours
- Minimum attendance
- 70%
- Final work
- 15 CFU
- Teaching language
- Italian
THE LEARNING EXPERIENCE
Live online learning, practical work and in-person assessment
Lectures and practical sessions are delivered exclusively online, synchronously, on Fridays and Saturdays.
The intermediate assessments for individual courses and the final examination are held in person.
Compulsory for at least 70 per cent of the hours of distance-learning lectures and practical sessions, work placements and/or project work
Theory and practice
Rules, responsibilities, systems, case studies and analysis techniques are studied as connected dimensions.
Work placement
275 hours for the law programme
375 hours for the IT programme
Assessment
Each module includes an assessment, which is held in person.
Final examination
The final examination is held in person. At the end of the course, students who have fulfilled all formal and substantive requirements (payment of fees, ongoing assessments, attendance, etc.) must, within the deadlines set by the Academic Board, submit their dissertation (in both digital and hard copy formats) to the course coordinator and must defend their dissertation before an Examination Board; this final examination consists of a presentation of the content and answers to any questions put by the Board.
EXPERTISE AND OPPORTUNITIES
Three fields, one integrated framework
The programme develops expertise relevant to professional responsibilities without promising or guaranteeing employment outcomes.
Data Protection
Governance of processing operations, rights and responsibilities, appropriate organisational and technical measures, and digital transformation processes.
Cybersecurity / Cybercrime
Security of data, systems, networks and applications; risk and vulnerability assessment; incident handling and the legal dimensions of cybercrime.
Digital Forensics
Acquisition, preservation, correlation and interpretation of digital evidence; technical reporting and understanding of evidential procedures.
SCIENTIFIC AND INSTITUTIONAL COLLABORATIONS
Scientific networks and specialist teaching
The current edition is supported by a national research network that also contributes directly to teaching.
Scientific and institutional collaboration
Cybersecurity National Lab – CINI
Consorzio Interuniversitario Nazionale per l’Informatica
The Master’s Degree is supported and promoted by CINI’s Cybersecurity National Lab. The Perugia Node contributes to the programme through specialist teaching.
Discover the Perugia NodeINTERNATIONAL DIMENSION
Double-degree agreements with Brazilian universities
The current edition documents international agreements linked to the Mestrado em Ciência Jurídica and a mobility period of 60 days.
Universidade do Vale do Itajaí (UNIVALI)
“Mestrado em Ciência Jurídica” at Universidade do Vale do Itajaí (UNIVALI)
DOUBLE DEGREE · MOBILITY: 60 daysATITUS Educação (ATITUS)
“Mestrado em Ciência Jurídica” at ATITUS Educação (ATITUS)
DOUBLE DEGREE · MOBILITY: 60 daysAPPLICATIONS
How to apply for the 4th edition
Applications must be submitted online by 1 pm on 10 October 2026.
- 01
Access SOL/Esse3
Use existing University of Perugia credentials or register as a new user.
- 02
Prepare the documents
Complete and sign Annex A; attach an identity document and the signed CV using Annex B. Foreign qualifications require the additional documentation specified above and in the call.
- 03
Submit and pay
Upload the application by the deadline and pay the non-refundable €60 application fee through pagoPA.
Selection
The Academic Board will appoint a Selection Committee if applications in either category (regular applicants and PA110elode applicants) exceed the stated limits. Selection will be based on qualifications, for a maximum of 60 points; in the event of a tie, priority will be given to the younger applicant.
How the 60 points are awarded
- Degree grade: up to 10 points.
- Time taken to complete the degree: up to 5 points.
- Additional qualifications relevant to the Master: up to 45 points, covering professional and technical experience, further education and certifications, research and publications, documented technical and interdisciplinary skills, and relevant projects or training activities.
From 13 October 2026, the University’s online notice board will publish confirmation that the minimum number has been reached and, where applicable, the Committee and the list of admitted or excluded applicants. If the activation threshold is not reached, deadlines may be extended or reopened by official notice.
KEY DATES
The current edition timeline
Call published and applications open
Application deadline
Publication of admission communications from this date
Master activities begin
Teaching concludes
Planned completion of activities
CONTINUE EXPLORING
Programme and faculty, in full
The dedicated pages provide the complete teaching plan and the full faculty profiles, without duplicating them here. For further questions, use the institutional links on the Contacts page.
OFFICIAL DOCUMENT
Call for applications – 4th edition
D.R. n. 1716 del 10.7.2026 · Official document in Italian