Privacy risks in Osiris addressed in collaboration with SURF
SURF has commissioned a data protection impact assessment (DPIA) on Osiris. The preliminary advice is that institutions can continue to use this student information system as long as they take...
Privacy risks Microsoft 365 Copilot to orange
SURF advises education and research institutions to exercise caution when deploying Microsoft 365 Copilot. That is the conclusion of a new DPIA (Data Protection Impact Assessment) on Microsoft 365 Copilot....
DPIA EduGenAI - working on safe and responsible AI in education
Together with Npuls, we are working on EduGenAI: a platform that enables the safe and responsible use of generative AI in higher education. Already at this stage of development, we...
Xedule uses SURF DPIA to further strengthen its privacy policy
SURF conducted a Data Protection Impact Assessment (DPIA) on Xedule, a cloud-based solution for planning and scheduling processes in education. We identified 17 high risks and 1 medium risk. Xedule...
The DPIA on EduGenAI will be published on September 1, 2025
The use of AI in education is a current topic. In Npuls, a privacy-friendly AI solution for educational institutions is being developed as an alternative to commercial generative AI solutions:...
Update DPIA Microsoft 365 Copilot
26 June 2025 - Microsoft recently provided us with new information on how they plan to implement mitigating measures. This information is now being analysed by us and reported back...
SURF advises not to use Microsoft 365 Copilot for the time being due to privacy risks
SURF advises educational and research institutions not to use Microsoft 365 Copilot for the time being. This is because research shows that there are privacy risks associated with using the generative...
Google Workspace can be safely used in education
So reports the Ministry of Education, Culture and Science (OCW) based on research by SURF and SIVON to the House of Representatives today. In recent years, SURF and SIVON investigated...