Page 19 - Enchiridion 4.0 program_EN

Strategic Partnerships for school education 2019-1-PL01-KA201-065137
Project: Teacher4.0 - comprehensive method of implementation of Industry 4.0
concept into didactic practice in primary and secondary schools

teachers. Therefore, in our technology-infused era the ability to safely navigate throughout our daily
lives, becomes just as important as the ability to read or write. It is a strong argument for providing
schoolchildren with basic cybersecurity knowledge and skills.

This module covers the following topics of cybersecurity: implementation of the General Data
Protection Regulation Law in on-line education, secure use of messengers and social media,
preventing malware; useful tips for both teachers and students on how to stay safe in the virtual
environment.

Introducing GDPR for education

The General Data Protection Regulation (GDPR) is a new, Europe-wide law that came into force on
25th May 2018. GDPR applies to all organizations, including schools, and individuals in EU. The
regulation is designed to protect all EU citizens’ data privacy and to harmonize all data privacy laws
across Europe. It sets new standards for data protection that: GDPR will affect what data you have,
how you use it, where it is stored, and how long it can be stored for.
The GDPR has 7 key principles:

Lawfulness, fairness and Data must be processed lawfully, fairly and in a transparent way e.g.
transparency terms of consent must be clear and in a plain language that is not
designed to confuse users

Purpose limitation The collection and processing of personal data must have a clearly
defined purpose. Such data cannot be reused for another purpose
that is incompatible with that original purpose.

Data minimization Institutions should not collect more personal data than they need.

Accuracy Data must be accurate and, where necessary, kept up to date.

Storage limitation Data should be stored for no longer than necessary.

Integrity and confidentiality Personal data must be protected against unlawful processing,
(security) accidental loss, destruction or damage.

Accountability Institutions are accountable for the handling of the personal data.
They must be able to demonstrate and document how they are
complying with data.

The principles have been designed to guide how people's data can be handled. They don't act as hard
rules, but instead as an overarching framework that is designed to layout the broad purposes of
GDPR.

Know the difference: personal and sensitive data

This project has been funded with support from the European
Commission. This communication reflects the views only of the
author, and the Commission cannot be held responsible for any
use which may be made of the information contained therein.