In the context of the digital age, safeguarding personal data has become a fundamental priority for institutions in both commercial and educational domains.

Personal data refers to information including birth date (age), residential address, telephone number, email address, academic background, and sensitive particulars such as health conditions, physical traits, and political affiliations. Given its significance in defining personal identity, safeguarding this data is crucial to uphold the rights of data subjects throughout its collection, storage, and processing.

The handling of sensitive information by educational platforms necessitates robust policies and informed consent, although most platforms and educational tools do not inform users transparently. Protecting student data is a difficult task for schools, as consent must be obtained when the student is a minor, and it is essential to educate students about the importance of withholding full consent when sharing personal data on educational platforms. Mexican legislation establishes data protection obligations, but their practical application in digital educational contexts presents a challenge.

This study employs a mixed-methods approach to comprehensively understand the impact of privacy management of personal data within educational technology environments through some surveys and small workshops that servers as an introduction to understand some risks that students can confront every day without notice. The objective is to present a thorough examination incorporating expert insights, detailed guidelines, and some actionable recommendations to advance our comprehension of data privacy within educational technology environments.

For this research, we obtained from a deeper analysis of surveys applied to students and teachers of higher education and small workshops some issues of their rights and we discuss privacy risks and harms in educational technology.

As a consequence of this, it was determined that this study examines both the benefits and challenges related to integrating data privacy considerations and regulatory awareness, highlighting how such knowledge can empower students to understand and mitigate privacy-related risks.

Keywords: Data privacy, personal data, risks, educational technology.