Understanding GDPR: Protecting Personal Data in Higher Education

Understanding GDPR: Protecting Personal Data in Higher Education

Learning Objective

Understand the key principles of GDPR and its implications for higher education institutions and adult learners.

What do you already know about GDPR and how it applies to higher education?

Introduction to GDPR

General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area.

Key Principles of GDPR

Principles include lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

Personal Data in Higher Education

Personal data in higher education encompasses student records, research data, staff information, and other sensitive data collected and managed by educational institutions.

Rights of Data Subjects

Data subjects have rights such as the right to access, rectify, erase, restrict processing, data portability, and object to processing of their personal data.

Consent and Data Processing

In higher education, obtaining valid consent for processing personal data is crucial. Institutions must ensure that consent is freely given, specific, informed, and unambiguous.

GDPR Compliance in Higher Education

Higher education institutions must implement appropriate technical and organizational measures to ensure GDPR compliance, including data protection impact assessments and appointing a Data Protection Officer.

Assessment and Q&A

Quiz and open discussion to assess understanding of GDPR principles and their application in the context of higher education.

Write down 3 things you learned in this lesson.

Write down 2 things you want to know more about.

Ask 1 question about something you haven't quite understood yet.