IMPLEMENTATION AND APPLICATION OF GDPR IN ROMANIAN EDUCATIONAL INSTITUTIONS

Abstract

Today, in Europe, more than 250 million people use the internet every day, both to visit social networking sites or platforms and to make purchases, bank transactions or tax returns in electronic format. The multitude of online activities carried out imposed a regulation of the circulation of personal data. According to Eurostat data, 85% of Romanians offer their personal data online, without thinking about the consequences, as opposed to 20%, which is the European average. We are therefore a vulnerable people, despite the fact that personal data trafficking has become a common practice in recent years. However, data security does not only target the virtual environment, but also the physical one. Thus, many public or private institutions and companies that take over and process personal data have to comply with the new Regulation. Of all the personal data processing institutions, we will direct our research to the educational units in Romania, as the situation is much more sensitive, considering the data subject – the minor. The purpose of this paper is to investigate the consequences of applying the GDPR one year after implementation, in pre-university education units in the country.