Using personal data in online proctoring

In online proctoring, you make video recordings of the candidate taking an exam. But what about the use of personal data? Can you just use personal data in online proctoring? On the one hand, there are rights that an exam candidate has. On the other hand, there are AVG obligations that the provider of the online proctoring exam must comply with.

Rights of an exam candidate in online proctoring

If, as a candidate, you want to take a test via online proctoring, you need to give explicit permission beforehand for the use of your data. You have the right to view your personal data, without having a specific reason to do so. You also have the right to have your personal data deleted.

Duties of provider exam online proctoring

As a provider of an exam via online proctoring, you need to follow the guidelines around implementation law General Data Protection Regulation (AVG). The candidate's explicit consent to the use of personal data is essential. Furthermore, you can observe the following guidelines.

Collect as little personal data as possible

It is important to collect as little personal data as possible from the candidate. Make sure you have the minimum amount of data needed to take an exam.

Keep only a temporary video if fraud is suspected

Are there suspicions that a candidate fraud during online proctoring? Then save a temporary copy of the video. Is the issue completed next? Then delete all online proctoring-related data. The data should be kept for a maximum of 30 days after recording

Conduct a Data Protection Impact Assessment (DPIA/PIA)

To prevent security and privacy risks, perform a Data Protection Impact Assessment (DPIA/PIA). That way, you gain insight into possible leaks, after which you can act on them.

Want to know more?

You can contact contact us for more information.