Navigating AI and GDPR in Education - A Case Study

Bridging the Gap: Innovation Meets Regulation

Artificial Intelligence (AI) holds the promise of transforming education, offering personalized learning experiences and real-time support for both educators and students. However, integrating AI in education comes with its own set of challenges, particularly in Europe where GDPR guidelines enforce strict user privacy. Additionally, the AI field is often guided by the practices and technologies of large, predominantly American, technology companies. This raises the question: How can educational institutions responsibly leverage the capabilities of AI while fully complying with data privacy and security regulations? Together with the Center for IT in Education in Denmark, we’ve built a platform to address this.

The Ezri Solution: A Protective Intermediary in the Digital Landscape

Ezri stands as a protective intermediary between users (such as students) and companies like Microsoft and OpenAI. By filtering sensitive personal data from user messages and eliminating associated metadata, interactions with large language model providers are stripped of sensitive data.

• Unified Sign-On: Rather than relying on multiple usernames or emails, Ezri's platform adopts a unified sign-on system. This enables users from diverse institutions to access the platform using a singular, common password, simplifying the login process while enhancing user anonymity. Not even we at Ezri know which student sends what message.

• Custom Machine Learning Filters: Inhouse trained privacy filters are a cornerstone of the platform. These advanced machine learning algorithms are designed to scrutinize every message, ensuring the detection and removal of sensitive data. With multilingual capabilities, these filters operate effectively in English, Danish, and German, catering to a broad European user base.

• Commitment to Data Minimisation: Aligned with the GDPR's "Data Minimisation" principle, the platform only handles indispensable data. As a result, it's designed to avoid the storage or retention of sensitive user information, reinforcing its position as a trusted intermediary.

Building a Secure Future: Ongoing Commitment

Our platform's compliance with GDPR and robust data protection capabilities have already received an enthusiastic response from educational institutions. As we continue to enhance the platform, the core principles of Data Minimisation and Privacy by Default and Design will continue to guide our development. This empowers educational institutions to utilize AI's potential, all without compromising on privacy or security.

Want to hear more?

Reach out on gustav.grimberg@ezri.ai.