Recordings, Replays & Downloads – What You Should Consider Regarding Data Protection
A brief guide to video recordings, course replays, and downloadable materials: When is consent necessary, where should files be stored, and how long can they be kept?
Dr. Mariia Bohach
8/10/20252 min read
Recordings of online sessions, replays, and downloadable materials can be very helpful for your clients. At the same time, they always touch upon issues of data protection, confidentiality, and professional boundaries—especially when faces, voices, or personal information are visible. This overview highlights what providers of online courses, coaching, and digital programs should pay attention to.
1. Do I need recordings at all?
Not every online session needs to be recorded. Ask yourself a few simple questions before making a decision:
Does the recording serve a clear, comprehensible purpose (e.g., replay for participants, internal quality assurance)?
Is there an equivalent alternative, such as written summaries or supplementary materials?
Are highly personal topics discussed in the session, making permanent storage a sensitive issue?
The more sensitive the content, the more critically you should evaluate whether a recording is truly necessary—especially in coaching and consulting.
2. Consent ("Informed Consent") for Recordings
If individuals are identifiable (image, voice, name in chat), you generally need explicit consent:
Inform participants clearly before starting whether the session is being recorded, what it will be used for, who will have access, and how long it will be stored.
Obtain consent in a documented manner (e.g., via Terms and Conditions, a form, or a brief confirmation during the registration process).
Make it clear that participation without recording—if possible—is an option (e.g., camera off, anonymized name).
This logic also aligns with the principles of the EAS™ Code of Ethics: informed consent, transparency, and respect for privacy.
3. Where and how should recordings be stored?
The same basic principles that apply to other personal data also apply to the storage of recordings and downloads:
Use secure, well-known platforms or cloud services with clear data protection regulations.
Avoid distributing files uncontrollably across multiple devices, USB drives, or private folders.
Create clear folder structures (e.g., by course, year, purpose) so it remains trackable what is where.
Limit access to authorized individuals (e.g., trainer, team members with a clear role).
It is crucial that, in case of doubt, you can explain where a specific recording is stored and who has access to it.
4. How long can I keep recordings?
There is no universal deadline, but these guidelines provide orientation:
Only store recordings as long as they serve the agreed purpose (e.g., duration of the course + a defined grace period).
Define an internal retention period (e.g., 3, 6, or 12 months) and put it in writing.
Schedule regular deletion routines (e.g., a review every six or twelve months) instead of accumulating all files indefinitely.
The more sensitive the content (e.g., coaching on personal issues), the shorter the retention period should be.
5. Downloads and Shared Files
Downloadable materials can also contain personal data (e.g., examples, chat excerpts, case studies):
Check if documents can be anonymized (no real names, no identifiable details).
Mark materials with a usage notice (e.g., "For personal use only, no distribution to third parties").
Provide files, whenever possible, via secure areas (e.g., a login portal) rather than freely accessible links.
6. Mini-Checklist: Recordings & Downloads
Use these questions as a quick self-check:
Is the purpose of the recording clearly defined and documented?
Is there clear, documented consent from the participants?
Are the storage location and access rights unambiguously regulated?
Is there an established retention and deletion period?
Are downloadable materials anonymized wherever possible?
If you can answer "Yes" to these five points, your handling of recordings and downloads is already significantly more structured than in many typical online setups.
CONTACTS
Moosbach,
Germany, 92709
ADDRESS
© 2026 European Attestation Standard (EAS). All rights reserved.
FOR OUR INTERNATIONAL PARTNERS:
Our website is available in German, Ukrainian, English, and Italian. To support our cooperation, we provide official EAS documents and attestation materials upon request, not only in these languages but also in any other required language by agreement.