Universität Kassel Fachgebiet Öffentliches Recht, IT-Recht und Umweltrecht

The DIRECTIONS research project is developing a data protection certification for educational information systems. This certification can be used as proof of compliance with the General Data Protection Regulation (GDPR) by both providers and customers.

The Karlsruhe Institute of Technology (KIT), University of Kassel and datenschutz cert GmbH are leading the implementation of the DIRECTIONS project. Trusted Cloud e.V. is acting as the program owner and future administrator.

DIRECTIONS pursues a two-stage approach to develop a comprehensive data protection certification and to create transparency in the market as early as possible.

In the first stage, providers of educational information systems can use the DIRECTIONS Declaration of Commitment to communicate their data protection practices transparently. Users receive initial guidance.

In the second stage, this declaration is developed into a Data Protection Certification in accordance with Art. 42 GDPR that undergoes accreditation by the competent authorities.