EdLaw
Bayern — Schuldatenschutz (BayEUG Art. 85, 85a)
The data-protection core of the Bayerisches Gesetz über das Erziehungs- und Unterrichtswesen: the legal basis for Bavarian public schools' processing of pupil, parent and staff data, and the statutory footing of the state-run school IT (the Art. 85a "automatisiertes Verfahren", operationally the BayernCloud Schule world). Bavaria is the second-largest German Land by our subscriber base (26 of 150 mapped active subscriptions — allocation in tools/subscriber-split/).
Fact text is German (authentic language); this README is curation.
Applicability to EdTech
- Processing is task-bound and catalogued: schools may process data required for their statutory tasks, with the pupil/teacher/parent data categories spelled out (Art. 85(1)); schools are obliged to process the Art. 85a/113a data through the Staatsministerium-provided school administration software (Art. 85(1) Nr. 1) — third-party admin tooling must coexist with, not replace, the state system.
- Transfers for other purposes are locked to the BayDSG conditions (Art. 85(2)).
- Art. 85a establishes the central processor: the Staatsministerium may appoint a public body as an Art. 28 GDPR Auftragsverarbeiter for schools (Art. 85a(1)), with the processable data catalogue in Art. 85a(2). A vendor product handling pupil data in Bavaria operates alongside this state-mandated processing chain; the school-side lawful basis for third-party tools flows from Art. 85(1) task-necessity plus GDPR — Bavaria has no NSchG-§ 31(5)-style express platform clause, so ministry guidance and the school's own DPIA carry more weight here.
- Supervision: Bavarian public schools answer to the Landesbeauftragter für den Datenschutz (BayLfD); private-sector vendors in Bavaria answer to the BayLDA — Bavaria is the one Land with two DPAs.
Contents
| Document | Covers |
|---|---|
| DATENVERARBEITUNG.md | BayEUG Art. 85, 85a — Verarbeitung personenbezogener Daten, automatisiertes Verfahren |
Scope note: the BayDSG (general Land data-protection act Art. 85(2) points into), the BaySchO (school regulations, incl. its provisions on digital tools) and KM guidance can be added when needed.
Key obligations at a glance
- School processing bounded to statutory tasks with an express data catalogue (Art. 85(1)); mandatory use of the state school-administration programme for the catalogued data (Art. 85(1) Nr. 1).
- Purpose-changing transfers only under the BayDSG conditions (Art. 85(2)).
Enforcement
BayLfD for public schools; BayLDA for private bodies (the vendor side). No school-specific penalty regime beyond the general data-protection machinery.
Licence
The corpus reproduces Art. 85 and 85a of the Bayerisches Gesetz über das Erziehungs- und Unterrichtswesen in the consolidated version on BAYERN.RECHT.
German copyright law places statutes and ordinances outside copyright. § 5 Abs. 1 Urheberrechtsgesetz (gesetze-im-internet.de — UrhG § 5, read 2026-10-01) provides: "Gesetze, Verordnungen, amtliche Erlasse und Bekanntmachungen sowie Entscheidungen und amtlich verfaßte Leitsätze zu Entscheidungen genießen keinen urheberrechtlichen Schutz."
The corpus takes the text from BAYERN.RECHT, published by the Bayerische Staatskanzlei. Its Impressum (gesetze-bayern.de/Content/Document/Impressum, read 2026-10-01) names the Staatskanzlei as publisher and Verlag C.H.Beck as technical provider and contains no terms restricting reuse; no other terms of use were found on the portal.
Conditions: none attach to the statute text, because no copyright subsists in it. The corpus still identifies its source: each fact document names its source in its opening citation line and in its Meta section, and Sources here links the official text (BAYERN.RECHT). The changes (the selection of provisions, the Markdown layout and the added anchors) are described in Meta. The corpus does not claim that the publisher endorses it, and only the officially promulgated text is authentic.
Related
- BDSG — the federal act on the vendor side
- Niedersachsen NSchG — contrast: NI has an express learning-platform clause (§ 31(5)); Bavaria works through task-necessity plus the state IT chain
- EU GDPR