Where should we draw the line?

https://www.kansascity.com/news/state/kansas/article311555392.html

Lawrence schools used 24/7 ‘digital surveillance’ on students, some say in suit

Nine teenage students of Lawrence’s high schools — seven former, and two current — filed suit Friday in the U.S. District Court for the District of Kansas claiming that school district subjected them to unlawful “round-the-clock digital surveillance.”

At issue is use of a third-party digital platform, software known as Gaggle, that they claim the district began using in November 2023 to unlawfully scan students’ emails, documents and other files on the digital devices given to them by the school. Through Gaggle, they say, the school conducted “suspicionless searches and seizures of student expression on a scale and scope that no court has ever upheld — and that the Constitution does not permit.”

… “This case,” the filing reads, “challenges the Lawrence, Kansas School District’s decision and policy to subject all students to round-the-clock digital surveillance — scanning their files, flagging their speech, and removing their creative work from access, often without notice, suspicion of suspected wrongdoing, or meaningful recourse.”

The suit, filed by Kansas City attorney Mark P. Johnson, asked for unspecified monetary damages and for the district to cease using Gaggle, which the suit claims violates the students’ 1st Amendment rights to free speech, their Fourth Amendment protections against unreasonable searches and siezures, and their Fourteenth Amendment guarantee of due process.

Perspective.

https://blogs.lse.ac.uk/businessreview/2025/08/01/why-is-gdpr-compliance-still-so-difficult/

Why is GDPR compliance still so difficult?

… In our research, we analysed 16 academic studies that explore the challenges businesses face when trying to comply with the GDPR. Our findings disclose a far more complex reality than the simplistic explanation of merely “not knowing the law”, revealing a wide range of challenges that still need to be addressed.

Our analysis identifies four main types of challenges that businesses face in implementing the GDPR: technical, legal, organisational, and regulatory.