AEPD bans facial recognition for online university exams in Spain
Spain's data protection authority sanctioned a university for using AI-powered facial recognition to monitor students during online exams without offering alternative verification methods. The AEPD found the system's biometric data processing violated current regulations, though it noted potential for future legislative development.
What happened
The Spanish data protection authority AEPD sanctioned Universidad Internacional Valenciana (VIU) for using AI-based facial recognition and dual-camera monitoring (360-degree surveillance) in online exams without valid alternatives for students.
The system captured and analyzed students' facial images in real time to verify identity and prevent fraud during online evaluations. VIU justified the biometric data processing as necessary to ensure authenticity and quality of online assessments.
Reported impact
Students were subjected to mandatory biometric surveillance during online exams without the option to use alternative verification methods.
Index analysis
The AEPD found that student consent could not be considered valid because no alternative examination method was available. The agency determined that the current legal framework does not permit such processing, though it noted potential for future regulatory development.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.