Data protection in distance learning and assessment