Educational institutions collect vast amounts of personal information such as names, email addresses, and physical addresses, but also special categories of data such as health information, disciplinary records, or ethnicity from a large number of students, employees, and alumni. As such, all educational institutions offering EU data subjects access to educational programs and services must comply with GDPR. Read more about GDPR.