Last updated on October 2, 2025
Not without safeguards. Under recent EU‑level developments and national data protection authority guidance, the use of AI‑based exam proctoring that processes sensitive personal data, records video/audio, or profiles students for behavioural anomalies requires a lawful basis, data protection impact assessments, minimisation of data processing, and provision of reasonable alternatives for students who object. The proposed EU AI Act and GDPR guidance classify intrusive remote proctoring as high‑risk in many contexts; institutions must document necessity, transparency, retention limits, and complaint procedures. Students must be informed and offered non‑discriminatory alternatives where monitoring would infringe rights, and institutions should consult national education authorities and data protection regulators before full deployment.
Guidance and Commission updates 2023–2024