{"id":35318,"date":"2026-04-07T10:13:09","date_gmt":"2026-04-07T08:13:09","guid":{"rendered":"https:\/\/www.pkf-attest.es\/noticias\/rgpd-plataformas-educativas-2\/"},"modified":"2026-04-07T10:13:09","modified_gmt":"2026-04-07T08:13:09","slug":"rgpd-plataformas-educativas-2","status":"publish","type":"noticias","link":"https:\/\/www.pkf-attest.es\/en\/noticias\/rgpd-plataformas-educativas-2\/","title":{"rendered":"Key Points of the GDPR for Digital Educational Platforms: AEPD\u2019s Ten-Point Guide"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>GDPR<\/strong> compliance <strong>on digital learning platforms<\/strong> is now a priority for schools, government agencies, and technology providers, especially when data processing involves minors.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">At a time when classrooms are increasingly reliant on digital solutions, GDPR compliance on digital educational platforms has become a priority for schools, government agencies, and technology providers. This key document, which aligns with the latest guidelines from the Spanish Data Protection Agency, emphasizes that when it comes to minors, protection must be paramount.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In this context, data protection authorities have published a set of ten essential principles to ensure the safe and responsible use of educational platforms, in accordance with the General Data Protection Regulation and the most recent rulings of the Spanish Data Protection Agency.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This set of guidelines covers the following key points:<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-text-color has-link-color wp-elements-1\" id=\"h-1-proteccion-reforzada-del-menor-en-plataformas-educativas\" style=\"color:#0f3780\"><strong>1. Enhanced protection for minors on educational platforms<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Any processing of personal data must be assessed with the child\u2019s best interests in mind. The fact that a platform is free of charge can never justify a reduction in the safeguards required by data protection regulations.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-text-color has-link-color wp-elements-2\" id=\"h-2-responsabilidades-claras-en-el-uso-de-plataformas-educativas\" style=\"color:#0f3780\"><strong>2. Clear responsibilities regarding the use of educational platforms<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Government agencies and educational institutions must acknowledge their role as data controllers and clearly define the division of responsibilities with their service providers. There can be no ambiguity regarding responsibilities.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-text-color has-link-color wp-elements-3\" id=\"h-3-licitud-y-limitacion-de-finalidades-en-entornos-educativos-digitales\" style=\"color:#0f3780\"><strong>3. Lawfulness and Purpose Limitation in Digital Educational Environments<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data may only be processed for strictly educational purposes. Any additional services not related to this purpose must remain disabled and outside the educational context.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-text-color has-link-color wp-elements-4\" id=\"h-4-evaluacion-de-impacto-en-la-proteccion-de-datos-en-plataformas-educativas\" style=\"color:#0f3780\"><strong>4. Data Protection Impact Assessment for Educational Platforms<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The large-scale processing of children\u2019s data in the cloud requires a comprehensive and up-to-date Data Protection Impact Assessment (DPIA), with the involvement of the Data Protection Officer prior to implementation, in accordance with the provisions of the LOPDGDD (Organic Law on Personal Data Protection and the Guarantee of Digital Rights).<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-text-color has-link-color wp-elements-5\" id=\"h-5-transparencia-en-el-tratamiento-de-datos-en-el-ambito-educativo\" style=\"color:#0f3780\"><strong>5. Transparency in data processing in the educational sector<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Information intended for families, students, and teachers must be clear, accessible, and easy to understand. The use of generic policies or fragmented or scattered information is not permitted.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-text-color has-link-color wp-elements-6\" id=\"h-6-contratos-con-proveedores-de-plataformas-educativas-digitales\" style=\"color:#0f3780\"><strong>6. Contracts with providers of digital educational platforms<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Data processing agreements must strictly comply with the GDPR and must not contain clauses that allow for unilateral modifications or opaque conditions. Control over subprocessors is equally essential.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-text-color has-link-color wp-elements-7\" id=\"h-7-garantias-en-las-transferencias-internacionales-de-datos\" style=\"color:#0f3780\"><strong>7. Safeguards for international data transfers<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">All international transfers must be backed by valid safeguards and a documented assessment of the level of protection provided by the destination country.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-text-color has-link-color wp-elements-8\" id=\"h-8-proteccion-de-datos-desde-el-diseno-y-por-defecto-en-plataformas-educativas\" style=\"color:#0f3780\"><strong>8. Data protection by design and by default in educational platforms<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Platforms must be configured to process only the data that is strictly necessary, without enabling by default any additional services that are not required for educational purposes.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-text-color has-link-color wp-elements-9\" id=\"h-9-medidas-de-seguridad-en-plataformas-educativas-digitales\" style=\"color:#0f3780\"><strong>9. Security Measures for Digital Learning Platforms<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Technical and organizational measures commensurate with the level of risk must be implemented, ensuring that security breaches are reported without delay and that the National Security Framework is complied with within the public administration sector.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-text-color has-link-color wp-elements-10\" id=\"h-10-derechos-del-alumnado-y-de-las-familias-en-entornos-educativos-digitales\" style=\"color:#0f3780\"><strong>10. Rights of Students and Families in Digital Educational Environments<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Students and their families must be fully guaranteed the rights of access, correction, objection, and deletion, and exercising these rights must not have any negative consequences for their right to education.<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">This guide outlines the key criteria that must be taken into account to ensure compliance with the GDPR when using digital educational platforms, particularly when data processing involves minors.<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/www.pkf-attest.es\/en\/services\/consulting\/gdpr\/\" target=\"_blank\" rel=\"noreferrer noopener\">GDPR Professional Service<\/a><\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"featured_media":34106,"template":"noticias-corporativa-single-post.php","categories":[270],"tags":[214,212],"novedades_corporativa":[],"class_list":["post-35318","noticias","type-noticias","status-publish","has-post-thumbnail","category-gdpr","tag-gdpr","tag-news","entry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.5 (Yoast SEO v28.5) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>GDPR on Educational Platforms: Key Steps to Protect Children\u2019s Data<\/title>\n<meta name=\"description\" content=\"Learn about the key legal provisions of the GDPR as they apply to digital educational platforms and the protection of children\u2019s data, according to the AEPD.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.pkf-attest.es\/en\/noticias\/rgpd-plataformas-educativas-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Key Points of the GDPR for Digital Educational Platforms: AEPD\u2019s Ten-Point Guide\" \/>\n<meta property=\"og:description\" content=\"Learn about the key legal provisions of the GDPR as they apply to digital educational platforms and the protection of children\u2019s data, according to the AEPD.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.pkf-attest.es\/en\/noticias\/rgpd-plataformas-educativas-2\/\" \/>\n<meta property=\"og:site_name\" content=\"PKF Attest\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2026\/04\/online-education-e-learning-e-book-concept-man-using-digital-tablet-education-1-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1705\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/rgpd-plataformas-educativas-2\\\/\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/rgpd-plataformas-educativas-2\\\/\",\"name\":\"GDPR on Educational Platforms: Key Steps to Protect Children\u2019s Data\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/rgpd-plataformas-educativas-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/rgpd-plataformas-educativas-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/online-education-e-learning-e-book-concept-man-using-digital-tablet-education-1-scaled.jpg\",\"datePublished\":\"2026-04-07T08:13:09+00:00\",\"description\":\"Learn about the key legal provisions of the GDPR as they apply to digital educational platforms and the protection of children\u2019s data, according to the AEPD.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/rgpd-plataformas-educativas-2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/rgpd-plataformas-educativas-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/rgpd-plataformas-educativas-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/online-education-e-learning-e-book-concept-man-using-digital-tablet-education-1-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/online-education-e-learning-e-book-concept-man-using-digital-tablet-education-1-scaled.jpg\",\"width\":2560,\"height\":1705,\"caption\":\"RGPD-plataformas-educativas-digitales\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/rgpd-plataformas-educativas-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Key Points of the GDPR for Digital Educational Platforms: AEPD\u2019s Ten-Point Guide\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/\",\"name\":\"PKF Attest\",\"description\":\"PKF Attest\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#organization\",\"name\":\"PKF-Attest\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/Logotipo_PKF-Attest-675x675-1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/Logotipo_PKF-Attest-675x675-1.jpg\",\"width\":675,\"height\":675,\"caption\":\"PKF-Attest\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/1078028\\\/admin\\\/dashboard\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"GDPR on Educational Platforms: Key Steps to Protect Children\u2019s Data","description":"Learn about the key legal provisions of the GDPR as they apply to digital educational platforms and the protection of children\u2019s data, according to the AEPD.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.pkf-attest.es\/en\/noticias\/rgpd-plataformas-educativas-2\/","og_locale":"en_US","og_type":"article","og_title":"Key Points of the GDPR for Digital Educational Platforms: AEPD\u2019s Ten-Point Guide","og_description":"Learn about the key legal provisions of the GDPR as they apply to digital educational platforms and the protection of children\u2019s data, according to the AEPD.","og_url":"https:\/\/www.pkf-attest.es\/en\/noticias\/rgpd-plataformas-educativas-2\/","og_site_name":"PKF Attest","og_image":[{"width":2560,"height":1705,"url":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2026\/04\/online-education-e-learning-e-book-concept-man-using-digital-tablet-education-1-scaled.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/rgpd-plataformas-educativas-2\/","url":"https:\/\/www.pkf-attest.es\/en\/noticias\/rgpd-plataformas-educativas-2\/","name":"GDPR on Educational Platforms: Key Steps to Protect Children\u2019s Data","isPartOf":{"@id":"https:\/\/www.pkf-attest.es\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/rgpd-plataformas-educativas-2\/#primaryimage"},"image":{"@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/rgpd-plataformas-educativas-2\/#primaryimage"},"thumbnailUrl":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2026\/04\/online-education-e-learning-e-book-concept-man-using-digital-tablet-education-1-scaled.jpg","datePublished":"2026-04-07T08:13:09+00:00","description":"Learn about the key legal provisions of the GDPR as they apply to digital educational platforms and the protection of children\u2019s data, according to the AEPD.","breadcrumb":{"@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/rgpd-plataformas-educativas-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.pkf-attest.es\/en\/noticias\/rgpd-plataformas-educativas-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/rgpd-plataformas-educativas-2\/#primaryimage","url":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2026\/04\/online-education-e-learning-e-book-concept-man-using-digital-tablet-education-1-scaled.jpg","contentUrl":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2026\/04\/online-education-e-learning-e-book-concept-man-using-digital-tablet-education-1-scaled.jpg","width":2560,"height":1705,"caption":"RGPD-plataformas-educativas-digitales"},{"@type":"BreadcrumbList","@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/rgpd-plataformas-educativas-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.pkf-attest.es\/en\/"},{"@type":"ListItem","position":2,"name":"Key Points of the GDPR for Digital Educational Platforms: AEPD\u2019s Ten-Point Guide"}]},{"@type":"WebSite","@id":"https:\/\/www.pkf-attest.es\/en\/#website","url":"https:\/\/www.pkf-attest.es\/en\/","name":"PKF Attest","description":"PKF Attest","publisher":{"@id":"https:\/\/www.pkf-attest.es\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.pkf-attest.es\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.pkf-attest.es\/en\/#organization","name":"PKF-Attest","url":"https:\/\/www.pkf-attest.es\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.pkf-attest.es\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2023\/12\/Logotipo_PKF-Attest-675x675-1.jpg","contentUrl":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2023\/12\/Logotipo_PKF-Attest-675x675-1.jpg","width":675,"height":675,"caption":"PKF-Attest"},"image":{"@id":"https:\/\/www.pkf-attest.es\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/1078028\/admin\/dashboard\/"]}]}},"_links":{"self":[{"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/noticias\/35318","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/noticias"}],"about":[{"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/types\/noticias"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/media\/34106"}],"wp:attachment":[{"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/media?parent=35318"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/categories?post=35318"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/tags?post=35318"},{"taxonomy":"novedades_corporativa","embeddable":true,"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/novedades_corporativa?post=35318"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}