EdLaw
Netherlands — Privacyconvenant Onderwijs 4.0 (Edu-K)
The sector agreement between the Dutch school councils (PO-Raad, VO-raad, MBO Raad) and EdTech suppliers under the Edu-K platform. Formally voluntary, practically mandatory: Dutch schools expect suppliers to have acceded, and accession binds you contractually — the NDPA of the Netherlands, which is why this ranks disproportionately high for 81 subscribers.
Text is Dutch (the authentic language); this README is curation.
Applicability to EdTech
- Fixed role allocation (artikel 3): the school is Verwerkingsverantwoordelijke, the supplier is Verwerker, and the school keeps independent control of purposes and means; the supplier must inform the school up front about processing and choices.
- The Model Verwerkersovereenkomst is exclusive (artikel 4 lid 2): acceded parties use only the model DPA (implementing GDPR Art. 28); deviations must be written and reasoned. Our Dutch contracting should start from that model, not our own DPA template.
- Purpose catalogue (artikel 5): an enumerated list of what schools process student data for via digital learning materials (storage/return/analysis of results, scheduling, communication, monitoring…) — processing outside the catalogue needs separate agreement.
- Privacy by design duty on suppliers (artikel 6); scope and out-of-scope (supplier-as-controller processing) in artikel 2.
- Accession: via privacyconvenant.nl (aanmelden); the participant register is public — being listed is a sales prerequisite in practice.
Contents
| Document | Covers |
|---|---|
| CONVENANT-KERN.md | artikelen 2–6 (doel/reikwijdte, rolverdeling, verwerkersovereenkomst, doeleinden, privacy by design) |
Scope note: the Model Verwerkersovereenkomst 4.0 itself and its bijlagen (the operational annexes schools fill in) are separate documents on privacyconvenant.nl — add when contracting work starts.
Enforcement
Contractual (accession); complaints and mediation via artikel 9 (not extracted); the AP enforces the underlying UAVG/GDPR.
Related
Sources
Meta
Convenant text in CONVENANT-KERN.md is reproduced verbatim in Dutch from the official convenant 4.0 PDF by tools/nl/build_nl.py; the "Versie 4.0 – 2022" footer stamp is asserted at build time, so a newer convenant version fails the build.