Answer to request

ERAELU KAITSE JA RIIGI LÄBIPAISTVUSE EEST

Tatari tn 39 / 10134 Tallinn / 627 4135 / [email protected] / www.aki.ee / registrikood 70004235

Yours: 03.02.2025 Ours: 12.02.2025 nr 2.2-9/25/377-2

Answer to request Estonian Data Protection Inspectorate received your questions about data protection guidelines and certifications in schools. Firstly, you required information if Estonian Data Protection Inspectorate has issued guidelines or similar materials on data protection in schools. We have not issued guidelines on data protection in schools. However, we have a frequently asked questions page, one video lecture for students and three circular letters for schools (in Estonian):

- Circular letter to schools 2024. - Circular letter to schools 2023. - Circular letter to schools 2021.

Secondly, you wish to know whether there have been made efforts towards or even finalized certifications under Article 42 of the GDPR in the school sector (e.g., school software). Estonia has not established data protection certification mechanisms under Article 42 of the GDPR in the school sector. Lastly, in Estonia we have the Education and Youth Board and Safer Internet Centre. Education and Youth Board is responsible for implementing Estonia’s education and youth policies. We suggest you contact the Education and Youth Board directly to ask if they have issued guidelines or materials on data protection for schools. Safer Internet Centre in Estonia has published some materials on digital education as their goal is to raise awareness among children, parents, teachers, social workers and general public as well. Please find their materials for teachers here (in Estonian). Unfortunately, these materials do not specifically cover data protection. I hope this answer helps you. Best regards

Grete-Liis Kalev

Lawyer

authorized by Director General