ERAELU KAITSE JA RIIGI LÄBIPAISTVUSE EEST
Tatari tn 39 / 10134 Tallinn / 627 4135 / info@aki.ee / www.aki.ee / registrikood 70004235
Yours: 03.02.2025
Ours: 12.02.2025 nr 2.2-9/25/377-2
Answer to request
Estonian Data Protection Inspectorate received your questions about data protection guidelines
and certifications in schools.
Firstly, you required information if Estonian Data Protection Inspectorate has issued guidelines or
similar materials on data protection in schools. We have not issued guidelines on data protection
in schools. However, we have a frequently asked questions page, one video lecture for students
and three circular letters for schools (in Estonian):
- Circular letter to schools 2024.
- Circular letter to schools 2023.
- Circular letter to schools 2021.
Secondly, you wish to know whether there have been made efforts towards or even finalized
certifications under Article 42 of the GDPR in the school sector (e.g., school software). Estonia
has not established data protection certification mechanisms under Article 42 of the GDPR in the
school sector.
Lastly, in Estonia we have the Education and Youth Board and Safer Internet Centre. Education
and Youth Board is responsible for implementing Estonia’s education and youth policies. We
suggest you contact the Education and Youth Board directly to ask if they have issued guidelines
or materials on data protection for schools.
Safer Internet Centre in Estonia has published some materials on digital education as their goal is
to raise awareness among children, parents, teachers, social workers and general public as well.
Please find their materials for teachers here (in Estonian). Unfortunately, these materials do not
specifically cover data protection.
I hope this answer helps you.
Best regards
Grete-Liis Kalev
Lawyer
authorized by Director General