Interim update memo on the Osiris DPIA | additions regarding vocational education

We would like to inform you that SURF Vendor Compliance has published an interim update memo regarding the expansion of the Osiris DPIA to include vocational education-specific scenarios. We have decided to do this because, following the publication of the Osiris DPIA in September 2025, it became apparent that essential elements for vocational education institutions were missing. These include clarification on the applicability of the risks to vocational education and tests on certain modules in Osiris.

In this interim update memo, we explain the steps we are taking to supplement the DPIA for the benefit of vocational education. We will implement these steps in Q2 2026 and in Q3 2026 we will publish the fully updated DPIA, including the assessment of existing risks and measures. This memo has been drawn up following extensive consultation with representatives of vocational education institutions.