https://gdprhub.eu/index.php?title=Rb._Amsterdam_-_C/13/6846...
> The Amsterdam Court of First Instance rejected the request by student representatives and an individual student for a preliminary injunction against the use of digital surveillance software for exams by a public university. The court ruled that measures against covid-19 did not allow for a suitable alternative and the processing could therefore be based on Article 6(1)(e) GDPR.
> (e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
What's the point of GDPR if you can side-step it in this way?
Will take the privacy regulators a few years, justice moves slow. But if I was a Proctorio shareholder I would be very very unhappy if my company got stuck in years of unresolved legal issues with unknown (and high) potential fines.