Wild World of Privacy and XR; Vendor Compliance

In this follow-up, we shift from identifying the challenges to trying practical ways of working with them. Our own vendor compliance team will host a hands-on workshop where privacy officers and support staff can try out tools for analysing XR risks in their own institutions. Expect exercises, space to compare approaches with colleagues, and templates you can take back to your institution. 

The situation 
XR headsets, apps, and cloud services are arriving on campus faster than our governance structures can adapt. It’s not just about what eye-tracking reveals or how long sensor logs are stored; it’s also about how we as institutions decide to purchase, evaluate, and use XR responsibly. With regulatory pressure increasing and budgets tight, it is vital to understand what questions to ask before a headset lands in a classroom. 

Through interactive activities and expert input, we will move from theory to practice, giving you approaches to help spot risks early and strengthen responsible XR adoption for students and staff. 

Who should join 
Privacy officers, security leads, procurement advisors, and educational innovators. Whether you are drafting your first DPIA for XR, negotiating a contract with a vendor, or simply curious about what your colleagues are doing, your contribution is valuable. 

Session details 
Date: October 28, 2025 
Time: 13:00 – 17:00, with networking drinks afterward 
Location: SURF Office, 
Utrecht Language: NL/EN (based on attendance) 
Cost: Free for SURF and Npuls members 

Together we’ll explore not just what the privacy risks are, but how we deal with them in context. Bring your questions, your stories, and your curiosity.