Online proctoring and privacy (AVG)

Using personal data in online proctoring

In online proctoring, you make video recordings of the candidate taking an exam. But what about the use of personal data? Can you just use personal data in online proctoring? On the one hand, there are rights that an exam candidate has. On the other hand, there are AVG obligations with which the provider of the online proctoring exam must comply.

Rights of an exam candidate in online proctoring

If you are a candidate wishing to take a test via online proctoring, you must give your explicit permission for the use of your data in advance. In doing so, you have the right to see your personal data without having a specific reason to do so. In addition, you have the right to have your personal data deleted.

Duties of provider exam online proctoring

As a provider of an exam via online proctoring, you need to follow the guidelines around implementation law General Data Protection Act (AVG). The candidate’s explicit consent to the use of personal data is essential in this. Furthermore, you can observe the following guidelines.

Collect as little personal data as possible

It is important to collect as little personal data from the candidate as possible. Make sure you have the minimum amount of data needed to take an exam.

Keep only a temporary video if fraud is suspected

Are there suspicions that a candidate is fraudulent during online proctoring? Then save a temporary copy of the video. Is the issue then concluded? Then delete all online proctoring related data. The data may not exceed 30 days after recording

Conduct a Data Protection Impact Assessment (DPIA/PIA).

To prevent security and privacy risks, conduct a Data Protection Impact Assessment (DPIA/PIA). That way, you gain insight into possible leaks, and then you can act on them.

Want to know more?

You can contact us for more information.

Related Content

Find quick answers