Personal data management in the education sector under the Personal Data Protection Law