Data privacy considerations in implementing digital twins in educational settings

This chapter examines the data privacy challenges arising from the implementation of digital twins in educational settings. It analyses how Internet of Things devices and artificial intelligence systems collect, process and exchange sensitive student data, creating risks related to unauthorized access, profiling, surveillance and third party use. The chapter discusses the application of the GDPR, DIGCOMP and FERPA, with particular attention to informed consent, data minimization, data retention, transparency and the responsibilities of educational institutions and EdTech providers. Drawing on stewardship theory, it argues for a student centered privacy model in which schools and universities act as accountable custodians of student data. The analysis also connects privacy governance with sustainability accounting and reporting, highlighting the environmental and social implications of digital infrastructures. The chapter proposes that educational institutions disclose responsible data management practices and integrate privacy, accountability and sustainability considerations into the governance of digital twin applications.