
{"id":15517,"date":"2020-05-26T12:42:29","date_gmt":"2020-05-26T11:42:29","guid":{"rendered":"https:\/\/www.rosello-mallol.com\/seleccionar-delegado-proteccion-datos-centro-educativo\/"},"modified":"2023-03-30T11:15:22","modified_gmt":"2023-03-30T10:15:22","slug":"how-choose-dpo-in-a-school","status":"publish","type":"post","link":"https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/","title":{"rendered":"How to choose a DPO in a school?"},"content":{"rendered":"\n<p>In Spain, since the publication of the <a rel=\"noreferrer noopener\" href=\"https:\/\/www.boe.es\/buscar\/doc.php?lang=en&amp;id=BOE-A-2018-16673\" target=\"_blank\">National Data Protection Law<\/a> in December 2018, is a legal obligation the need to appoint a DPO (Data Protection Officer) in a School. <\/p>\n\n\n\n<p>The challenges of the DPO position, which will be analyzed later, have increased considerably, with the <strong>COVID19 crisis<\/strong> that has launched many Schools to explore multiple <strong>technological tools<\/strong> to continue with their &#8220;normal&#8221; activity with their students at home: Video calls platforms, applications or extensions for roll call, online exams through facial recognition or publication of student work online, etc.<\/p>\n\n\n\n<p>As I say, this has meant that the School\u2019s DPO, should act quickly in the face of increasing needs of each School. <\/p>\n\n\n\n<p>In front any new technology, it is necessary to carry out a thorough evaluation of its privacy and security policies: what data do they collect? For what purpose? Where do they host them? Do they subcontract any of their services? <\/p>\n\n\n\n<p>In addition to the usual challenges of using a new technology, it is added in Schools that <strong>the data subjects are minors<\/strong>, so the challenge is double.<\/p>\n\n\n\n<p>All this leads me to write a few lines about the position or role of the DPO in Schools: <\/p>\n\n\n\n<p>As I said, in addition of being a legal obligation, the sector itself has special characteristics: data processing of minors, sometimes special categories of data, a high use of information technologies, progressive expansion of the type of contractors of the School with access to data, cloud services, etc &#8230; for all this in the search for a DPO, especially if this or this is external, the Schools should ask themselves <u><strong>four key questions<\/strong><\/u> regarding the great offer available:<\/p>\n\n\n\n<ol class=\"wp-block-list\" type=\"1\">\n<li>Do you have any kind of <strong>certification<\/strong>? Currently, there are multiple certifications to prove knowledge on privacy and data protection. In my opinion, they do not have to mean anything <em>per se<\/em> in relation to who presents them, but it can be an initial clue of knowledge, which must be confirmed afterwards.<\/li>\n\n\n\n<li>Do you have <strong>creditable experience<\/strong> in the education <strong>sector<\/strong>? It is a very special sector and an inexperienced DPO can be a problem until he or she is been &#8220;trained,&#8221; just as a DPO with only experience in the education sector would be for other sectors.<\/li>\n\n\n\n<li>Is it really <strong>independent<\/strong>? The autonomy of the DPO is another legal obligation since in its functions it should not fall into possible conflicts of interest. Sometimes DPO services are offered, directly or indirectly, by other School\u2019s vendors who in turn offer products or services that involve extensive data processing. In these cases, DPO\u2019s independence is at least, questionable, as it will be difficult to reveal any shortcomings in these other services or products contracted by the Center.<\/li>\n\n\n\n<li>What <strong>commitments<\/strong> does the DPO assumes? Schools day to day is dynamic and changing. A DPO, especially when it is external, must have the organizational capacity to be present on this day-to-day and it should not be the Schools that &#8220;reminds&#8221; that it has a DPO. A correct development of DPO\u2019s function implies establishing a formal structure, in which DPO is fully aware of any action of the School involving data processing, as well as implementing a reporting system to the Management Team so that they can, knowing the opinion of the DPO, make the decisions. The use of technologies should undoubtedly be a tool to provide this service, but DPO must have a &#8220;presence&#8221; at the School and not just give general and depersonalized instructions.<\/li>\n<\/ol>\n\n\n\n<p>The decision <strong>to hire a DPO<\/strong> in a School is fundamental in the sector, and not only because it is a legal obligation. <\/p>\n\n\n\n<p>The correct function of the DPO and its active participation in Schools decision making process, must send a &#8220;message&#8221; to the educational community that is none other than privacy is a value of that School, as it should be of any democratic society.<\/p>\n\n\n\n<p>I hope that the answer to these four key questions can serve to make a correct decision.<\/p>\n\n\n\n<p>If you have any doubts or you want more information, please contact us <a href=\"https:\/\/www.rosello-mallol.com\/en\/contact\/\" target=\"_blank\" rel=\"noreferrer noopener\">here<\/a>!<\/p>\n\n\n\n<p>This work is under a license from&nbsp;<a rel=\"noreferrer noopener\" href=\"http:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/\" target=\"_blank\">Attribution-NonCommercial-NoDerivatives 4.0 International of Creative Commons<\/a>.<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In Spain, since the publication of the National Data Protection Law in December 2018, is a legal obligation the need to appoint a DPO (Data Protection Officer) in a School. The challenges of the DPO position, which will be analyzed later, have increased considerably, with the COVID19 crisis that has launched many Schools to explore [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":15294,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","_joinchat":[],"footnotes":""},"categories":[246],"tags":[449,447,451],"class_list":["post-15517","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-data-protection","tag-dpo-2","tag-schools"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v25.3 (Yoast SEO v27.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>How to choose a DPO in a School? - Rosell\u00f3 Mallol<\/title>\n<meta name=\"description\" content=\"Since the publication of the National Data Protection Law, in December 2018, it is a legal obligation to appoint a DPO in a School.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to choose a DPO in a school?\" \/>\n<meta property=\"og:description\" content=\"In Spain, since the publication of the National Data Protection Law in December 2018, is a legal obligation the need to appoint a DPO (Data Protection\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/\" \/>\n<meta property=\"og:site_name\" content=\"Rosell\u00f3 Mallol\" \/>\n<meta property=\"article:published_time\" content=\"2020-05-26T11:42:29+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-03-30T10:15:22+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/Delegado-de-Proteccion-de-Datos-en-un-Centro-Educativo.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"530\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"webmaster\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@vic_rosello\" \/>\n<meta name=\"twitter:site\" content=\"@vic_rosello\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"webmaster\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How to choose a DPO in a School? - Rosell\u00f3 Mallol","description":"Since the publication of the National Data Protection Law, in December 2018, it is a legal obligation to appoint a DPO in a School.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/","og_locale":"en_US","og_type":"article","og_title":"How to choose a DPO in a school?","og_description":"In Spain, since the publication of the National Data Protection Law in December 2018, is a legal obligation the need to appoint a DPO (Data Protection","og_url":"https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/","og_site_name":"Rosell\u00f3 Mallol","article_published_time":"2020-05-26T11:42:29+00:00","article_modified_time":"2023-03-30T10:15:22+00:00","og_image":[{"width":800,"height":530,"url":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/Delegado-de-Proteccion-de-Datos-en-un-Centro-Educativo.jpg","type":"image\/jpeg"}],"author":"webmaster","twitter_card":"summary_large_image","twitter_creator":"@vic_rosello","twitter_site":"@vic_rosello","twitter_misc":{"Written by":"webmaster","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/#article","isPartOf":{"@id":"https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/"},"author":{"name":"webmaster","@id":"https:\/\/www.rosello-mallol.com\/en\/#\/schema\/person\/8f75280dab453a1bd38804fe66110f7d"},"headline":"How to choose a DPO in a school?","datePublished":"2020-05-26T11:42:29+00:00","dateModified":"2023-03-30T10:15:22+00:00","mainEntityOfPage":{"@id":"https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/"},"wordCount":698,"publisher":{"@id":"https:\/\/www.rosello-mallol.com\/en\/#organization"},"image":{"@id":"https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/Delegado-de-Proteccion-de-Datos-en-un-Centro-Educativo.jpg","keywords":["Data Protection","DPO","Schools"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/","url":"https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/","name":"How to choose a DPO in a School? - Rosell\u00f3 Mallol","isPartOf":{"@id":"https:\/\/www.rosello-mallol.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/#primaryimage"},"image":{"@id":"https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/Delegado-de-Proteccion-de-Datos-en-un-Centro-Educativo.jpg","datePublished":"2020-05-26T11:42:29+00:00","dateModified":"2023-03-30T10:15:22+00:00","description":"Since the publication of the National Data Protection Law, in December 2018, it is a legal obligation to appoint a DPO in a School.","breadcrumb":{"@id":"https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/#primaryimage","url":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/Delegado-de-Proteccion-de-Datos-en-un-Centro-Educativo.jpg","contentUrl":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/Delegado-de-Proteccion-de-Datos-en-un-Centro-Educativo.jpg","width":800,"height":530,"caption":"DPO in a school"},{"@type":"BreadcrumbList","@id":"https:\/\/www.rosello-mallol.com\/en\/how-choose-dpo-in-a-school\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Inici","item":"https:\/\/www.rosello-mallol.com\/en\/"},{"@type":"ListItem","position":2,"name":"How to choose a DPO in a school?"}]},{"@type":"WebSite","@id":"https:\/\/www.rosello-mallol.com\/en\/#website","url":"https:\/\/www.rosello-mallol.com\/en\/","name":"Rosell\u00f3 Mallol","description":"Despatx advocats experts en TIC i Protecci\u00f3 de dades","publisher":{"@id":"https:\/\/www.rosello-mallol.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.rosello-mallol.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.rosello-mallol.com\/en\/#organization","name":"Rosell\u00f3 Mallol - Advocats especialistes en dret digital","url":"https:\/\/www.rosello-mallol.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rosello-mallol.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/logo-definitiu-web.png","contentUrl":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/logo-definitiu-web.png","width":4000,"height":736,"caption":"Rosell\u00f3 Mallol - Advocats especialistes en dret digital"},"image":{"@id":"https:\/\/www.rosello-mallol.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/vic_rosello","https:\/\/www.instagram.com\/rosellomallol\/","https:\/\/www.linkedin.com\/in\/victorrosello\/","https:\/\/www.youtube.com\/channel\/UCxcqAdksWzsEaZ5UYoFJd0Q\/featured"]},{"@type":"Person","@id":"https:\/\/www.rosello-mallol.com\/en\/#\/schema\/person\/8f75280dab453a1bd38804fe66110f7d","name":"webmaster","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/73641b46ed44db8f663f428fc279f909e9f48696e06a190b1e330f4634071610?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/73641b46ed44db8f663f428fc279f909e9f48696e06a190b1e330f4634071610?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/73641b46ed44db8f663f428fc279f909e9f48696e06a190b1e330f4634071610?s=96&d=mm&r=g","caption":"webmaster"},"url":"https:\/\/www.rosello-mallol.com\/en\/author\/webmaster\/"}]}},"jetpack_featured_media_url":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/Delegado-de-Proteccion-de-Datos-en-un-Centro-Educativo.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/posts\/15517","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/comments?post=15517"}],"version-history":[{"count":0,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/posts\/15517\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/media\/15294"}],"wp:attachment":[{"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/media?parent=15517"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/categories?post=15517"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/tags?post=15517"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}