Professional Digital Competence, Digital Judgment, and Pupil Data Protection

Rationale

Norway's Professional Digital Competence Framework for Teachers (PfDK) and the LK20 curriculum together establish digital competence as a binding professional requirement, not an optional skill. The PfDK defines seven competence areas including ethics, pedagogy, and digital judgment, while LK20 makes digital skills a cross-curricular basic skill that every teacher must develop in pupils. Separately, the GDPR as implemented in personopplysningsloven imposes strict data-protection duties on schools processing children's data, supervised by Datatilsynet. These three strands - professional digital competence, digital judgment, and pupil data protection - form a coherent body of statutory and framework-based knowledge that Norwegian teachers must master. The course addresses a high-priority area where practitioner uncertainty persists, particularly around lawful data processing, digital tool vetting, and the ethical dimensions of classroom technology. It is designed as fundable further education that a school owner can commission for whole-staff or targeted group development.

Part I: Foundations (Lessons 1-4)

Lesson 1. What professional digital competence means in Norway

The lesson opens with the PfDK framework's core definition: professional digital competence is the integrated capacity to use digital tools, resources, and practices in pedagogical, subject-didactic, and administrative work, not merely technical tool literacy. Participants examine how the framework distinguishes Norwegian professional digital competence from generic digital literacy by anchoring it in the teacher's professional role, ethical responsibility, and the school's societal mandate. The session uses the PfDK's own introductory text to map the seven competence areas and the cross-cutting strand of digital judgment. Participants reflect on their current practice against the framework's definition and identify gaps between their own digital competence and the framework's expectations. After the lesson, participants can articulate what professional digital competence means in the Norwegian context and can locate their own practice within the PfDK's overall definition.

Lesson 2. The PfDK competence areas

This lesson provides a structured orientation to the seven competence areas of the PfDK: subjects and basic skills, pedagogy and subject didactics, ethics, school in society, leadership of learning processes, interaction and communication, and change and development. Participants work in small groups to map each area to concrete classroom and school-level tasks, such as selecting digital resources for a subject, managing online communication with parents, or leading a digital-development initiative. The session emphasises that the areas are interdependent and that professional digital competence is not a checklist but a holistic professional capability. Participants use the PfDK's own descriptors to self-assess their strength in each area and identify one area for focused development. After the lesson, participants can name and describe all seven PfDK competence areas and can relate each area to their own professional responsibilities.

Lesson 3. Digital skills as an LK20 basic skill

The lesson examines the LK20 Core Curriculum's definition of digital skills as one of five cross-curricular basic skills that every teacher is responsible for developing, not only the information-technology teacher. Participants read the Core Curriculum's basic-skills principle and analyse how digital skills are defined as being able to use digital tools, media, and resources to acquire, process, produce, and present information, to exercise digital judgment, and to communicate and collaborate. The session uses subject-curriculum examples from LK20 to show how digital skills appear in competence aims across mathematics, social studies, Norwegian, and science. Participants plan one lesson in their own subject that explicitly develops a digital-skills competence aim. After the lesson, participants can explain the curricular mandate for digital skills as a cross-curricular basic skill and can identify where digital skills appear in their subject's competence aims.

Lesson 4. Digital judgment (digital dømmekraft)

This lesson introduces digital judgment as the cross-cutting strand that runs through all PfDK competence areas and as a distinct learning goal for pupils under LK20. Participants examine the PfDK's definition of digital judgment: the ability to act critically, ethically, and safely in digital environments, including evaluating sources, protecting privacy, and understanding the consequences of online conduct. The session uses case examples of teacher dilemmas - such as handling a pupil's inappropriate online post, assessing the credibility of a viral source, or deciding whether to share pupil work publicly - to explore what digital judgment looks like in practice. Participants develop a framework for teaching digital judgment to pupils across age groups, drawing on the critical-thinking core value of LK20. After the lesson, participants can define digital judgment as a professional and pedagogical concept and can design activities that develop pupils' digital judgment.

Part II: Core Practice (Lessons 5-10)

Lesson 5. Source criticism and information literacy

The lesson addresses the teacher's dual responsibility: to exercise source criticism in their own professional work and to teach pupils to evaluate sources systematically. Participants examine the PfDK's digital-judgment strand and the LK20 critical-thinking core value as the anchoring framework. The session presents a structured source-evaluation protocol adapted for Norwegian schools, covering authority, accuracy, currency, purpose, and bias, with special attention to the challenges of generative content and algorithm-driven information environments. Participants practice applying the protocol to real digital sources, including social-media posts, news articles, and AI-generated text, and discuss how to scaffold source-criticism skills across primary and secondary levels. After the lesson, participants can apply a systematic source-evaluation protocol to digital content and can plan age-appropriate source-criticism instruction for their pupils.

Lesson 6. Online safety and the school environment online

This lesson connects the PfDK's digital-judgment strand and the school-environment chapter of the Education Act to the prevention and response to digital bullying, harassment, and harmful online conduct. Participants examine how the activity obligation (aktivitetsplikt) extends to digital spaces where pupils interact, including out-of-hours conduct that affects the school environment. The session uses case studies of digital incidents - such as group-chat exclusion, image-based harassment, and impersonation - to practice applying the fivefold duty: følge med, gripe inn, varsle, undersøke, sette inn tiltak. Participants draft a school policy section on digital environment monitoring and response. After the lesson, participants can identify when online conduct triggers the activity obligation and can apply the duty's components to digital incidents.

Lesson 7. Foundations of pupil data protection

The lesson establishes the core principles of the GDPR as they apply to schools processing children's personal data, using personopplysningsloven as the implementing Norwegian statute. Participants learn the six GDPR principles: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality. The session uses school-specific examples - such as taking attendance photos, maintaining pupil records in a learning management system, or sharing pupil work online - to illustrate each principle. Participants identify which principles are most frequently challenged in school practice and discuss the heightened protection owed to children's data under GDPR Article 6 and Recital 38. After the lesson, participants can state the six GDPR principles and can recognise when a school practice may violate one or more of them.

Lesson 8. Lawful basis and children's data

This lesson deepens the data-protection foundation by focusing on identifying a lawful basis for processing pupils' personal data, with special attention to the conditions for processing children's data. Participants examine the six lawful bases under GDPR Article 6 and determine which bases are most commonly available to schools: public task (the school's statutory duty under the Education Act), legal obligation, and consent. The session addresses the limitations of consent as a basis when there is a power imbalance between school and pupil or parent, and the requirement that consent be freely given, specific, informed, and unambiguous. Participants work through scenarios - such as using a digital assessment tool, publishing pupil photos on the school website, or running a wellbeing survey - to identify the correct lawful basis and document the reasoning. After the lesson, participants can identify the appropriate lawful basis for common school data-processing activities and can explain when consent is and is not a valid basis.

Lesson 9. Choosing and vetting digital learning tools

The lesson addresses the school's duty to ensure that digital tools used in teaching comply with data-protection law, focusing on data-processing agreements (databehandleravtale) and data protection impact assessments (DPIA). Participants learn the distinction between a data controller (the school or school owner) and a data processor (the tool provider) and the requirement that every processor sign a compliant data-processing agreement before the tool is used. The session presents a vetting protocol that includes checking whether the tool processes personal data, whether a DPIA is required under GDPR Article 35, whether the provider stores data in the EEA or a country with adequate protection, and whether the provider's terms allow the school to meet its own data-protection duties. Participants practice vetting a commonly used educational app against the protocol. After the lesson, participants can apply a structured vetting protocol to a digital learning tool and can identify when a data-processing agreement or DPIA is needed.

Lesson 10. Consent, transparency, and pupil and parent rights

This lesson covers the information duties and data-subject rights that schools must honour, including the right to access, rectification, erasure, restriction, data portability, and objection. Participants examine the transparency obligation under GDPR Articles 12-14: the school must provide clear, concise, and accessible information about what data is processed, why, on what basis, for how long, and with whom it is shared. The session uses a model privacy notice for a Norwegian school and asks participants to evaluate whether it meets the transparency standard. Participants practice responding to a parent's request for access to their child's data and discuss the limits of the right to erasure when data is processed under a legal obligation or public task. After the lesson, participants can explain the school's transparency duties and the key data-subject rights, and can respond appropriately to a data-subject request.

Part III: Application and Mastery (Lessons 11-15)

Lesson 11. Ethics of classroom technology

The lesson examines the ethical dimensions of using technology in teaching, drawing on the ethics area of the PfDK and the human-dignity core value of LK20. Participants discuss equity concerns: whether technology use widens or narrows gaps between pupils with different home access, how algorithmic tools may embed bias, and whether screen-based learning reduces opportunities for embodied and relational learning. The session also addresses attention and surveillance concerns, including the use of monitoring software, the collection of behavioural data, and the tension between personalised learning and pupil privacy. Participants develop an ethical decision-making framework for classroom technology that balances pedagogical benefit against potential harm, drawing on the PfDK's ethics area and the LK20 human-dignity value. After the lesson, participants can identify ethical tensions in classroom technology use and can apply an ethical framework to decide whether and how to use a digital tool.

Lesson 12. Accessibility and inclusive digital design

This lesson connects the PfDK to the inclusion architecture of the 2024 Education Act by examining how digital resources must serve pupils entitled to individually adapted education. Participants learn the principles of universal design for learning as applied to digital materials: multiple means of engagement, representation, and action and expression. The session uses accessibility-checking tools to evaluate common digital resources for barriers to pupils with visual, hearing, motor, or cognitive impairments. Participants also discuss the school's duty under the 2024 Act to provide individually adapted education, including through accessible digital tools, and the relationship between universal design and individual accommodation. After the lesson, participants can evaluate digital resources for accessibility barriers and can plan inclusive digital learning activities that serve pupils with diverse needs.

Lesson 13. Assessment and feedback with digital tools

The lesson explores how digital tools can support assessment for learning (vurdering for læring) without compromising fairness, validity, or data protection. Participants examine the LK20 assessment principle and the underveisvurdering rules in the forskrift til opplæringslova, then consider how digital tools can enable timely, specific, and pupil-involving feedback. The session addresses risks: automated feedback that is generic or inaccurate, tools that collect excessive data, and the temptation to use digital assessment for surveillance rather than learning. Participants evaluate two digital assessment tools against criteria derived from the PfDK pedagogy area and the LK20 assessment principle, and design a formative assessment activity that uses a digital tool lawfully and pedagogically soundly. After the lesson, participants can select and use digital assessment tools that support assessment for learning while respecting data-protection and pedagogical principles.

Lesson 14. Teacher digital wellbeing and administrative competence

This lesson addresses the PfDK's administrative strand and the practical reality that teachers handle significant digital administrative work, from grading platforms to communication systems to pupil records. Participants examine the concept of digital wellbeing: managing digital workload, maintaining boundaries between work and personal time, and avoiding digital exhaustion. The session covers lawful and efficient handling of digital records, including retention schedules, secure storage, and proper deletion under the GDPR storage-limitation principle. Participants audit their own digital administrative practices against a checklist derived from the PfDK administrative strand and personopplysningsloven, and develop a personal plan for sustainable digital practice. After the lesson, participants can identify practices that protect their own digital wellbeing and can manage digital administrative tasks in a lawful and efficient manner.

Lesson 15. Building a school digital-competence and data-protection plan

The final lesson synthesises the course into a collective planning exercise: participants design a school-level plan that maps staff professional development to the PfDK framework and establishes data-protection compliance routines that meet Datatilsynet expectations. The session uses the PfDK's own professional-development aim and the school owner's statutory duty to ensure relevant and updated competence as the anchoring requirements. Participants work in school teams to draft a plan that includes a staff self-assessment against the PfDK areas, a prioritised development calendar, a tool-vetting protocol, a data-processing agreement register, a DPIA schedule, and a data-breach response procedure. Plans are peer-reviewed against criteria derived from the PfDK and personopplysningsloven. After the lesson, participants can produce a school digital-competence and data-protection plan that addresses both professional development and legal compliance.

This syllabus was designed from primary-source research of this nation's official teacher requirements and passed independent verification. The full course, its lessons, assistant, and materials are live for enrolled educators.