Strengthening data governance in EdTech

Imagine a world where children can learn, explore, and thrive in digital environments with confidence, knowing their data is safeguarded and their rights are upheld. A world where education technology (EdTech) platforms protect children’s privacy, businesses operate responsibly, governments enforce strong policies, and children themselves play an active role in shaping their digital experiences.

This aspiration was at the heart of UNICEF Innocenti's Data Governance Workshop in Florence, Italy, on March 17–18, 2025. The event was part of a series of global consultations and convened 21 experts in data governance and privacy from around the world, including academics, civil society representatives, data protection authorities, and UN agencies. The goal was to identify effective solutions to help improve the governance of children’s data, particularly in the context of EdTech. Participants shared insights, developed draft EdTech policy recommendations for key stakeholders, and proposed action points to strengthen data governance practices in EdTech.

Central issues in EdTech data governance

EdTech has the potential to expand access to quality learning resources regardless of geographic location, enable personalized and adaptive learning, foster cross-cultural collaboration, and equip students with digital skills essential for the modern workforce. At the same time, these resources and tools often collect vast amounts of personal data, including sensitive information such as students' academic performance, behavioral patterns, and even biometric data. 

Without robust governance, this data can be misused, exposing children to risks such as commercial exploitation, discrimination, or privacy breaches. Unfortunately, many existing data governance frameworks fail to address the unique vulnerabilities of children. This is why UNICEF Innocenti is working to promote policies and practices that prioritize children’s rights and well-being. 

Over the course of two days, experts discussed some of the most pressing issues, including:

• How can we navigate the benefits of data use and privacy in EdTech? While data-driven insights can enhance education, protections often lag behind. A 'child rights by design' approach is essential to embed strong safeguards in EdTech tools from the start. This requires a careful distinction between data use that genuinely benefits students and practices that prioritize commercial interests or institutional oversight at their expense.
   
• How can we embrace innovation in data governance? One of the innovation approaches that we discussed was interoperable certification schemes for EdTech governance, which could help set clear standards for responsible data practices while reducing regulatory fragmentation. Other approaches, such as regulatory sandboxes, may encourage mutual learning and the exchange of best practices within the EdTech sector.
   
• How can we mitigate cybersecurity risks in education? As data breaches continue to rise in educational settings, cybersecurity has become a growing concern. Schools and EdTech companies face increasing pressure to protect sensitive student and educator data. There is a need for stronger cybersecurity measures, such as multifactor authentication and data decentralization, as well as protocols for swift breach reporting to minimize harm. However, addressing this challenge must account for the varying capacities and resources of different institutions and companies.
   
• How can we leverage civil society as a catalyst for change? Advocacy groups play a crucial role in pushing for stronger data protections through public education, legal action, petitions, and regulatory complaints. But their impact goes beyond activism – they equip communities with the knowledge and tools to challenge unethical practices and help children and parents navigate digital learning safely. Still, the responsibility cannot fall solely on civil society. A multistakeholder approach is essential to create lasting, systemic change.
   
• How can we best enable youth participation? While there are opportunities for youth engagement in data governance, ensuring their voices genuinely shape policy remains a challenge. Too often, their participation is symbolic rather than substantive. Thoughtful strategies are needed to move beyond tokenism and create meaningful avenues for children to influence the rules that govern their digital lives.

Key trends in data governance

To contextualize the policy options, we also discussed how the global data governance landscape is changing and key trends that will have a profound impact on children’s data. They range from:

• The rise of data sovereignty: As global tech giants dominate the digital space some countries are seeking greater control over their data. Data sovereignty policies like local data storage are rising to protect national interests, but these efforts must be balanced with the need for global collaboration and cross-border digital learning.
   
• Inconsistent approaches to regulation: Fragmented regulatory frameworks are creating inconsistencies in enforcement, making it difficult to establish coherent standards for EdTech and data protection. Improved global cooperation and alignment is crucial to prevent regulatory loopholes, while still allowing for regional flexibility in implementation.
   
• Lack of sufficient enforcement mechanisms: Big Tech’s dominance increases the risks of surveillance and data misuse, especially for children. AI-driven systems have intensified data extractivism, often bypassing privacy safeguards. This not only demands stronger enforcement, but also regulatory approaches that keep up with the rapid pace of technological change.
   
• The misinformation crisis: AI-generated mis- and disinformation is eroding public trust and low digital literacy levels are leaving young people more vulnerable. Tackling this challenge requires robust media literacy education, better content moderation policies, and the promotion of diverse and reliable information sources.
   
• Widening digital divide: Many education systems are falling behind in the digital transition. Unequal access to EdTech tools is deepening existing inequalities, leaving under-resourced schools at a disadvantage. Bridging this divide means investing in infrastructure and crafting inclusive digital policies that serve all learners.

Shaping the future of EdTech together

UNICEF is committed to improving data governance in EdTech. By collaborating with diverse stakeholders to analyze challenges, develop solutions and build consensus, we are laying the foundation for long-term impact. Achieving this vision will require ongoing collaboration, but with targeted interventions, we can create a digital learning environment that truly benefits every child.

For more, visit UNICEF Innocenti's page on good governance of children's data.

The event was generously funded by the Ministry for Foreign Affairs of Finland.