Go to Wolters Kluwer VitalLaw.comGo to Wolters Kluwer VitalLaw.com
VitalLaw®
  • Find answers to your questions
  • Log in to access your subscriptions
In depth. On point.
In depth. On point.
  • Home
  • Legal Directory
  • Home
  • Legal Directory
In depth. On point.
  • Articles
    • Articles
  • Organizations
    • Organizations
    • Election Bill Amendment Aims to Protect Voters’ Personal Data
    • Cyber Insurance Views Sought by Treasury for Report to Congress
    • FCC Adds Foreign-Made Consumer Routers to ‘Covered List’
    • New Jersey Bill Would Set Privacy Requirements for Minors
    • Social Media Safety Bill Advances in Minnesota
    • Spanish Regulators Outline Privacy Principles for Digital Education Platforms
    • U.K.’s ICO Updates Guidance on Legitimate Interests for Processing, Reuse of Information
  • Articles
    • Articles
  • Organizations
    • Organizations

    Cybersecurity Policy Report, Spanish Regulators Outline Privacy Principles for Digital Education Platforms, (Mar 24, 2026)

    By Tony Foley

    The Spanish data protection authority, Agencia Española de Protección de Datos (AEPD), together with the Catalan, Basque, and Andalusian DPAs, has published a document outlining 10 basic data protection principles applicable to the contracting and us ...

    By Tony Foley

    The Spanish data protection authority, Agencia Española de Protección de Datos (AEPD), together with the Catalan, Basque, and Andalusian DPAs, has published a document outlining 10 basic data protection principles applicable to the contracting and use of digital education platforms in the education sector.

    In a press release yesterday, the Catalan Data Protection Authority (APDCAT) said the guidance was aimed at the different agents and operators that process personal data in the field of education through technological platforms, including educational administrations, public and private schools, and companies offering cloud-based digital educational platforms. The release notes that the use of these platforms presents specific risks and challenges in personal data protection.

    The guidance may be accessed from the press release but is available only in Spanish. A machine translation reveals that the agencies acknowledge that the use of tech platforms allows students, teachers, and families to collaborate for educational purposes, but they add that the implementation of the platforms entails a significant responsibility because it involves the massive processing of personal data, particularly data related to minors.

    The guidance identifies the following 10 core principles that must be taken into account in data processing involving digital education platforms: (1) respect for rights and freedoms in the processing of personal data; (2) determination of responsibility for the processing; (3) legitimacy and limitation of purposes; (4) impact assessment and participation of the data protection officer; (5) transparency and information; (6) processing contract and control of sub-processors; (7) guarantees in international transfers; (8) data protection by design and by default; (9) information security; and (10) guarantee of the rights of individuals.

    News: InternationalLegislation DataPrivacy DataSecurity

    © 2026 CCH Incorporated and its affiliates and licensors. All rights reserved.

    • Manage Cookie Preferences
    • Privacy Statement
    • Terms of Use