Your data – Your concern: why is it worth sharing knowledge with students
What are the personal data breaches in educational institutions? When and to whom does the school entrust the data? Why is it important to teach about data protection? These are only selected issues that were discussed during the online meeting for school coordinators of the UODO’s nationwide educational program "Your data – Your concern".
The two-day event organized by the Personal Data Protection Office was held on October 15 and 16, 2020. It was addressed to coordinators from schools and educational institutions that applied to participate in the 11th edition of the "Your data – Your concern" program. In the 2020/2021 school year, 370 schools and educational institutions joined the program.
The past event was an opportunity to present the legal grounds for the processing of personal data, with particular emphasis on the provisions relating to the educational sector and problems reported by school’s Data Protection Officers. Equally important was the presentation of the UODO's educational program for schools, which included, among others, presenting examples of educational initiatives implemented in the previous editions of the program.
The first day of the seminar was devoted to explaining the key issues related to the safe processing of personal data. The topics discussed by UODO’s experts included both general issues of data protection law and the right to privacy, as well as more complex problems faced by educational institutions, because the speakers also took into account the issues reported to the UODO by Data Protection Officers from the educational sector.
They concerned issues such as: determining the status of entities in the processing of personal data, indicating the legal basis for the processing of personal data and issuing authorizations to process personal data. Other issues discussed during the meeting related to the notification of data breaches. The UODO’s expert explained what causes breaches in educational institutions, and also discussed the controller’s obligations in relation to the breach.
There were also answers to the key questions posed to the Personal Data Protection Office by representatives of the educational sector in recent months with regard to the use of new technologies by schools and the need to protect digital identity. In addition, a lot of information presented during the meeting concerned also personal data processing outsourcing agreements, processing of pupils' data in connection with providing medical care in schools or the fulfillment of the information obligation.
The presented issues were complemented by a review of UODO’s initiatives undertaken on the European arena, which contributed to raising awareness of teachers and students about data protection and the right to privacy, as well as those that the supervisory authority has undertaken in recent months in response to the need to support schools in the processing of data during remote learning.
On the second day of the training, workshops were held, during which representatives of the educational sector presented their own experiences related to participation in the educational program and presented selected educational initiatives that they had implemented in their schools and educational institutions in previous years.
Together with the presentation of the goals of the program and the stages of its implementation in the school year 2020/2021, this information familiarized the participants of the meeting with the practical aspects of the program implementation. The speakers not only shared their experiences with the meeting participants, but also gave valuable advice on how to attractively and effectively teach about personal data.