The increasing role of data in our daily lives is driving new opportunities but also raising questions for constitutional democracies. The protection of privacy and personal data are not only related to the protection of individual rights and freedoms, for instance, against surveillance regimes, but also to collective interests for democracy, primarily transparency and accountability. Therefore, the legal regime ensuring the protection of privacy and personal data plays a critical role in striking a balance market dynamics, public legitimate interests and fundamental rights. This course will aim to provide students with skills to understand privacy and data protection law. Once introduced the rise of privacy and data protection, the focus of this course will be on the European Union, primarily on the General Data Protection Regulation (GDPR), as model to regulate the processing of personal data, and some case studies on privacy and data protection in the digital age.