University diploma/various certificates under GDPR
posted 3 years ago
I'm considering building a web (focused on Europe) that would require users to upload their university diplomas and/or other similar certificates of achieved education. These would be visible only to other users of the said web.
Are such documents considered sensitive under GDPR?
Usually, there are names and signatures of the third parties on the certificates, such as the dean's name and signature on the university diploma. Is the user even legally permitted to scan such a document and upload it on the internet without the other parties' consent?