...
The following subjects should be assessed:
The purpose of the data processing.
The legal basis for the data processing (including the need of Data Processing Agreement).
The obligation to inform the data subjects (students) about the processing (Privacy Statement).
Solutions and procedures for rectification, erasure or restricting of the data processing.
Risk assessment of the data processing.
Data protection measures and procedure for discrepancy processing.
Data protection measures in the EWP infrastructure
Further efforts involving the European Commission and National Authorities are underway to ensure that the data minimization is systematically applied to the EWP data dictionaries, which are based on the official templates set out by EU.