Search

On 25 May 2018 the European Union's General Data Protection Regulation (EU GDPR) becomes enforced (regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data). The GDPR provides stricter general rules applying to any kind of personal data processing. For educational sector, this creates new legal and operational risks, the severity of which may result in enormously high fines. For educational institutions the minimal compliance means requirement to appoint Data Protection Officers, limitations and restrictions on usage of personal data and its application within the defined legal scope. These changes will bring significant impact on management of education, where personal data is an integral part of daily operations, as well as on the academic research, where personal data is frequently used in large amounts. This research article aim is to provide an overview of the EU GDPR and draw out basic recommendations about compliance to the EU GDPR to be considered for management of educational sector, where personal data is used in daily operations of both public and private institutions, as well as for scientific projects, which often include the processing of personal data, the use of which is strictly regulated by the EU GDPR. [ABSTRACT FROM AUTHOR]