Decision No 50/2021 of the HDPA was issued following its 4/2020 Opinion addressed to the Ministry of Education and Religious Affairs (MERA) succeeding the dispatch of MERAs Data Protection Impact Assessment (DPIA) to be checked by the Hellenic Data Protection Authority (HDPA). The processing activities of MERA regarded carrying out live distance education in the school units of the primary and secondary education through digital platform Webex Meetings. The Opinion was aimed at ensuring the compliance of the use of the aforementioned distance learning tool with the requirements of the General Data Protection Regulation 679/2016 (GDPR) and the Greek Law 4624/2019.
The issues arising from transfers of personal data to the US, a country that has not adopted an adequacy decision, for the purposes of data processing by MERA as a Controller were subject to analysis of the said decision. The Ministry of Education and Religious Affairs was reprimanded as a consequence of its failure to carry out a detailed Transfer Impact Assessment regarding transfers of data to the US in accordance with the decisions and instructions of the competent European institutions, in order to ensure that personal data transferred are protected in accordance with the GDPR and in particular Chapter V thereof.
We would like to thank Nomiki Vivliothiki for the chance to provide our contribution in this matter by conducting our comments to the decision 50/2021 published in Efarmoges Dimosiou Dikaiou.
Read more here (in Greek)
