Question 111 · PDPL, GDPR & privacy

How should PDPL affect LMS selection?

Treat identity, progress, assessments, certificates, and tickets as personal data. Lawful basis, retention, access rights, and processor terms belong in the RFP. GDPR-aligned is not a PDPL answer.

Tender bullet

PDPL maps training records as personal data; jurisdiction-specific answers required.

Paste into the questionnaire annex

Related tender questions

When does GDPR apply to a GCC LMS?
Is a DPA template available ungated?
How long are completions retained?
How are access and deletion requests handled?

Educational and evidentiary material for procurement and IT evaluators. Adapt with your legal, privacy, and information-security counsel. Commercial terms, SLAs, and certificate serials are confirmed in the bid — not invented on this page.