Denmark bans Chromebooks and Google Workspace in schools over data transfer risks – TechCrunch

Denmark is effectively banning Google services in schools after officials in Helsingor Municipality did so last year ordered to carry out a risk assessment in connection with the processing of personal data by Google.

in one Verdict published last weekDenmark’s data protection authority, Datatilsynet, revealed that data processing involving students is used Google’s cloud-based workspace software suite – This includes Gmail, Google Docs, Calendar and Google Drive – “does not meet the requirements” of the GDPR data protection regulations of the European Union.

In particular, the agency noted that the Data Processing Agreement – or Google’s Terms of Service – appears to allow the transfer of data to other countries for the purpose of providing support, although the data is typically stored in one of Google’s EU data centres.

Google’s Chromebook laptops, and therefore Google Workspace, are used in schools across Denmark. But Datatilsynet specifically focused its risk assessment on Helsingør after the municipality reported a “personal data breach” back in 2020. While this latest decision technically only applies to schools in Helsingør for now, Datatilsynet notes that many of the conclusions they have reached will “probably apply to other municipalities” using Google Chromebooks and Workspace. She added that she expects these other municipalities to “take relevant steps” following the decision taken in Helsingør.

The ban is effective immediately, but Helsingør has until August 3 to delete user data.

data flows

At the heart of the problem is the now defunct one EU-US Privacy Shield, which governs how data can be shared between the EU and the United States. While a new data flow deal is generally agreed, it is not yet in force, which has left many organizations in limbo. Consequently, large technology companies rely on Standard Contractual Clauses for their data processing practices.

A Google spokesperson told TechCrunch:

We know that students and schools expect the technology they use to be compliant, responsible and safe. That’s why Google has invested in privacy best practices and thorough risk assessments for years, and is making our documentation publicly available so everyone can see how we help companies comply with the GDPR.

Schools own their own data. We only process your data in accordance with our contracts with you. In Workspace for Education, student data is never used for advertising or other commercial purposes. Independent organizations have audited our services, and we continually review our practices to maintain the highest possible standards of security and compliance.

This latest announcement follows local data guards in France, Italyand Austria ruled that websites using Google Analytics to track visitors violate European data protection regulations as personal data is transferred to the USA for processing. And Ireland’s Data Protection Commission (DPC) now is Currently pondering how Facebook’s parent company Meta transfers data between Europe and the US, which could affect how Europeans can access services like WhatsApp and Instagram.

As European legislators strive to establish a higher level of digital sovereignty, Google has strengthened its platform and infrastructure to ensure public and private organizations remain within the company. A few months ago Google announced that it would introduce new “sovereign controls” for Workspace users in Europe, allowing them to “control, restrict and monitor data transfers to and from the EU”.

However, these controls will not be made available until later this year as additional data control tools will be introduced throughout 2023. And it’s not clear at this early stage whether these new tools will be watertight in terms of GDPR compliance.

Denmark bans Chromebooks and Google Workspace in schools over data transfer risks – TechCrunch Source link Denmark bans Chromebooks and Google Workspace in schools over data transfer risks – TechCrunch

Related Articles

Back to top button