Legal and ethical aspects of ensuring the security of students' personal data in the widespread transition of educational institutions to electronic services

Abstract

This article examines the complex legal and ethical issues involved in ensuring the security of students' personal data amid the mass migration of educational institutions to electronic services. It analyzes the risks associated with the expanded scope of information collected (including IP addresses, biometric data, and behavioral metrics) through digital diaries, distance learning platforms, and proctoring systems. The vulnerability of minors, who cannot fully grasp the consequences of data processing, is emphasized. The study is based on an analysis of Russian legislation (primarily the Federal Law On Personal Data»), international regulations (GDPR, COPPA), and ethical principles. Key contradictions are identified: the conflict between the convenience of digitalization and the right to privacy, parents' insufficient awareness of the actual volume of data collection, and the formalization of consent procedures. Special attention is paid to the risks posed by free educational platforms that covertly monetize student data and to the practice of integrating commercial services that lead to the creation of detailed digital profiles». The results show that technical protection measures (encryption, authentication) are insufficient without fostering a culture of information security among teachers and administrators. Critical problems include the lack of unified standards for IT systems in education, weak regulation of sensitive data processing (health, psychological information), the risk of stigmatization due to algorithmic analysis of academic performance, and cross-border challenges when using foreign platforms. The need to balance pedagogical oversight with respect for students' personal boundaries is stressed to avoid instilling a sense of total surveillance. The author concludes that it is urgent to synchronize legal norms with technological development, strengthen educational efforts with parents and students, and implement the principle of privacy by design at all stages of the development and deployment of educational IT solutions. Successful data protection requires a comprehensive approach combining legislative regulation, technical measures, and the ethical responsibility of all participants in the educational process.