Contemporary eLearning environments collect a large amount of data in a learning process, tracking the activities performed by learners. Integral part of them are learning analytics tools that process, predict and visualize information to support all participants in this educational process. At the same time, the problem about protecting personal and sensitive data in inter- and intra-institutional communication and implementing secure data transmission should be considered. In this regard, the aim of the paper is to present the results of a research carried out regarding present solutions and best practices in bringing eLearning environments in line with the requirements for organizational and technical measures laid down in the General Data Protection Regulation (GDPR). GDPR principles and how they could technologically be implemented in eLearning environments are examined. A conceptual model for protection of students’ data according to GDPR is developed.