Proof of data protection efforts in companies. A comparison of assessment methods and their verification mechanisms

Authors: Eva Späthe, Philipp Danylak, Sebastian Lins, Ali Sunyaev

Abstract: The increasing digitalization of services and processes leads to an increased exchange of data, which poses risks in terms of data protection. There are therefore various options for companies to demonstrate data protection-friendly behavior or conformity with the requirements of the GDPR. The article provides an overview of the basics of conformity assessment and the five most common mechanisms for practical orientation.

Link: https://doi.org/10.1007/s11623-025-2157-5

School information systems. Development of a data protection certification

Authors: Eva Späthe, Jan Torben Helmk, Marcel Kohpeiß, Sebastian Lins, Philipp Danylak, Gerrit Hornung, Ali Sunyaev

Abstract: With the increasing use of digital technologies in education, schools are confronted with the need to comply with the legal requirements of the General Data Protection Regulation (GDPR) and the respective state (school) laws when using school information systems. The article highlights the practical relevance of certifications in accordance with Art. 42 GDPR for the education market and presents the initial results and challenges in the development of a school-specific certification procedure.

Link: https://doi.org/10.1007/s11623-025-2158-4