DATA PROTECTION AND DIGITAL SURVEILLANCE IN EDUCATIONAL ENVIRONMENTS: LEGAL CHALLENGES IN THE FACE OF THE GENERAL DATA PROTECTION LAW (LGPD)
DOI:
https://doi.org/10.56238/ERR01v10n3-029Keywords:
Data Protection, Digital Education, LGPD, Information GovernanceAbstract
This paper comparatively analyzes the legal frameworks for personal data protection applicable to the education sector in different jurisdictions, with a special focus on Brazil's General Data Protection Law (LGPD), the European Union's General Data Protection Regulation (GDPR), and sectoral legislation in the United States, such as FERPA and COPPA. The research is based on the observation that the intensive digitalization of educational environments has transformed schools and universities into highly datafied spaces, in which the processing of personal data has become central to institutional functioning. Using a qualitative and exploratory approach, the study identifies convergences and divergences between regulatory models, especially regarding the regulatory scope, legal bases for processing, the protection of sensitive data, data subject rights, and governance and enforcement mechanisms. The conclusion is that, although there are common principles across the different legal systems, such as purpose, transparency, and security, practical requirements vary significantly, requiring educational institutions to adopt a proactive and ethical approach to data management, aiming to protect privacy and promote a democratic and inclusive digital culture.
Downloads
References
AUSTRALIA. Privacy Act 1988. Canberra: Commonwealth of Australia, 1988. Disponível em: https://www.legislation.gov.au/Details/C2004A03712. Acesso em: 18 ago. 2025.
BRASIL. Lei n.º 13.709, de 14 de agosto de 2018. Institui a Lei Geral de Proteção de Dados Pessoais (LGPD). Diário Oficial da União: Brasília, DF, 15 ago. 2018. Disponível em: http://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/L13709.htm. Acesso em: 18 ago. 2025.
CALIFORNIA. California Consumer Privacy Act (CCPA), Cal. Civ. Code §§ 1798.100 a 1798.199, 2018. Disponível em: https://oag.ca.gov/privacy/ccpa. Acesso em: 18 ago. 2025.
CALIFORNIA. California Privacy Rights Act (CPRA) (Proposition 24), 2020. Disponível em: https://oag.ca.gov/privacy/ccpa/prop24. Acesso em: 18 ago. 2025.
CANADA. Personal Information Protection and Electronic Documents Act (PIPEDA), S.C. 2000, c. 5. Ottawa: Government of Canada, 2000. Disponível em: https://laws-lois.justice.gc.ca/eng/acts/P-8.6/. Acesso em: 18 ago. 2025.
SOUTH AFRICA. Protection of Personal Information Act (POPIA), Act No. 4 of 2013. Pretoria: Government of the Republic of South Africa, 2013. Disponível em: https://popia.co.za/ (texto consolidado). Acesso em: 18 ago. 2025.
UNIÃO EUROPEIA. Regulamento (UE) 2016/679 do Parlamento Europeu e do Conselho, de 27 de abril de 2016 (Regulamento Geral sobre a Proteção de Dados – GDPR). Jornal Oficial da União Europeia, L 119, p. 1–88, 4 mai. 2016. Disponível em: https://eur-lex.europa.eu/eli/reg/2016/679/oj. Acesso em: 18 ago. 2025.
UNITED KINGDOM. Data Protection Act 2018. Londres: The National Archives, 2018. Disponível em: https://www.legislation.gov.uk/ukpga/2018/12/contents. Acesso em: 18 ago. 2025.
UNITED STATES. Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g; 34 CFR Part 99, 1974. Disponível em: https://www2.ed.gov/policy/gen/guid/fpco/ferpa/index.html. Acesso em: 18 ago. 2025.
UNITED STATES. Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506; 16 CFR Part 312, 1998. Disponível em: https://www.ftc.gov/legal-library/browse/statutes/childrens-online-privacy-protection-act. Acesso em: 18 ago. 2025.
BRASIL. Lei n.º 13.709, de 14 de agosto de 2018. Institui a Lei Geral de Proteção de Dados Pessoais (LGPD). Diário Oficial da União: Brasília, DF, 15 ago. 2018. Disponível em: http://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/L13709.htm. Acesso em: 18 ago. 2025.
CALIFORNIA. California Consumer Privacy Act (CCPA), Cal. Civ. Code §§ 1798.100 a 1798.199, 2018. Disponível em: https://oag.ca.gov/privacy/ccpa. Acesso em: 18 ago. 2025.
CALIFORNIA. California Privacy Rights Act (CPRA) (Proposition 24), 2020. Disponível em: https://oag.ca.gov/privacy/ccpa/prop24. Acesso em: 18 ago. 2025.
UNIÃO EUROPEIA. Regulamento (UE) 2016/679 do Parlamento Europeu e do Conselho, de 27 de abril de 2016 (Regulamento Geral sobre a Proteção de Dados – GDPR). Jornal Oficial da União Europeia, L 119, p. 1–88, 4 mai. 2016. Disponível em: https://eur-lex.europa.eu/eli/reg/2016/679/oj. Acesso em: 18 ago. 2025.
UNITED STATES. Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g; 34 CFR Part 99, 1974. Disponível em: https://www2.ed.gov/policy/gen/guid/fpco/ferpa/index.html. Acesso em: 18 ago. 2025.
UNITED STATES. Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506; 16 CFR Part 312, 1998. Disponível em: https://www.ftc.gov/legal-library/browse/statutes/childrens-online-privacy-protection-act. Acesso em: 18 ago. 2025.
CALIFORNIA. California Privacy Rights Act (CPRA), Proposition 24, 2020.
COSTA, José Eduardo. Proteção de dados pessoais: fundamentos, direitos e deveres. São Paulo: Saraiva, 2020.
DONEDA, Danilo. Da privacidade à proteção de dados pessoais. Rio de Janeiro: Forense, 2019.
GELLER, Barbara. “Privacy in U.S. Education Law: FERPA and COPPA in the Age of EdTech.” Journal of Law and Education, v. 51, n. 2, p. 145–168, 2022.
KAMINSKI, Margot E.; URBAN, Jennifer M. “The California Privacy Rights Act: A New Era for U.S. Data Protection.” Berkeley Technology Law Journal, v. 36, n. 1, p. 1–45, 2021.
UNIÃO EUROPEIA. Regulamento (UE) 2016/679 do Parlamento Europeu e do Conselho, de 27 de abril de 2016. Regulamento Geral sobre a Proteção de Dados (GDPR). Jornal Oficial da União Europeia, Bruxelas, 2016.
UNITED STATES. Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g; 34 CFR Part 99, 1974.
UNITED STATES. Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506, 1998.