ABSTRACT
This article explores the specific roles and responsibilities of technology providers when it comes to implementing Data Protection by Design (‘DPbD’) and Data Protection by Default (‘DPbDf’). As an example, it looks at the Education Technology (‘Ed Tech’) sector and the complexities of the supply chains that exist therein to highlight that, in addition to the Higher Education (‘HE’) institutions that procure products and services for advancing teaching and learning, Ed Tech vendors may also have responsibility and liability for the processing of student’s personal data. Ultimately, this paper asks whether there are any legal gaps, ambiguities, or normative conflicts to the extent that technology providers can have responsibility in contemporary data processing activities yet escape potential liability where it concerns issues of General Data Protection Regulation (‘GDPR’) compliance.
Liane Colonna, Implementing Data Protection by Design in the Ed Tech Context: What Is the Role of Technology Providers?, 13 Case Western Reserve Journal of Law, Technology and the Internet 81 (2022).
First posted 2022-04-01 10:00:18
Leave a Reply