Slovenia’s Maribor District Court upheld the Information Commissioner’s decision stating educational institutions must comply with data protection by design and default standards. The DPA claimed schools must ensure their security providers maintain an adequate level of data protection and establish clear guidelines on data processing and deletion.
Full story