Personal data protection
Making use of digital services entails the submission and processing of personal data; using Turnitin is no exception. In this respect, the licence agreement with the institution states that Turnitin will process these data only at the institution’s behest, in accordance with the Personal Data Protection Act (Wet bescherming persoonsgegevens, Wbp) and other applicable legislation.
General Data Protection Regulation
The General Data Protection Regulation (GDPR) comes into effect on 25 May, after which the current Personal Data Protection Act (Wet bescherming persoonsgegevens, Wbp) will no longer apply. In order to meet the requirements of the GDPR, Turnitin will have to conclude a new processing agreement with the UvA. SURF is facilitating this process and is currently discussing the conditions of this processing agreement with Turnitin. The UvA will ensure timely conclusion of a processing agreement that complies with the new and stricter European laws and regulations.