Iceland: Persónuvernd publishes instructions on distance education
The Icelandic data protection authority ('Persónuvernd') published, on 24 March 2020, instructions on distance education and technology in schools. In particular, Persónuvernd outlined, among other things, that teachers should review school policies on specific technology solutions before they are put into use and schools should pay special attention to processing sensitive personal data. Moreover, Persónuvernd highlighted that employees should generally use their work emails. However, Persónuvernd noted that, if they do need to use their private emails to send important information, they may need to encrypt these with strong passwords if they contain personal information. Lastly, Persónuvernd announced that, when using cloud services and networks, all organisational measures should be followed in respect of the services offered by the workplace.
You can read the press release, only available in Icelandic, here.