TY - JOUR

T1 - Danish DPA Banned the Use of Google Chromebooks and Google Workspace for Education in Schools in Helsingør Municipality

AU - Corrales Compagnucci, Marcelo

PY - 2022

Y1 - 2022

N2 - On July 14th, 2022, the Danish Data Protection Authority (Datatilsynet – Danish DPA) imposed a general ban on the use of Google Chromebooks and Google Workspace for education in primary schools in Helsingør Municipality. The Danish DPA banned such processing and suspended any related data transfers to the United States (U.S.) until it was brought in line with the General Data Protection Regulation (GDPR). The suspension took effect immediately, and the Municipality had until August 3rd, 2022, to withdraw and terminate the processing, as well as delete data already transferred.Finally, in a new decision on August 18th, 2022, the Danish DPA has ratified the ban to the use of Google Chromebooks and Workspace. In the eyes of the Danish DPA, the Municipality failed inter alia to document that they have assessed and reduced the relevant risks to the rights and freedoms of the pupils. This article is divided as follows: section II provides the background concerning the still unfolding events after the Schrems II decision. Section III, discusses the origins and facts of the Danish DPA decision. Section IV, examines the reasoning and key findings of the Danish DPA decision. Finally, section V concludes with some general recommendations that the Danish municipalities must follow based on the ensuing effects stemming from this case.

AB - On July 14th, 2022, the Danish Data Protection Authority (Datatilsynet – Danish DPA) imposed a general ban on the use of Google Chromebooks and Google Workspace for education in primary schools in Helsingør Municipality. The Danish DPA banned such processing and suspended any related data transfers to the United States (U.S.) until it was brought in line with the General Data Protection Regulation (GDPR). The suspension took effect immediately, and the Municipality had until August 3rd, 2022, to withdraw and terminate the processing, as well as delete data already transferred.Finally, in a new decision on August 18th, 2022, the Danish DPA has ratified the ban to the use of Google Chromebooks and Workspace. In the eyes of the Danish DPA, the Municipality failed inter alia to document that they have assessed and reduced the relevant risks to the rights and freedoms of the pupils. This article is divided as follows: section II provides the background concerning the still unfolding events after the Schrems II decision. Section III, discusses the origins and facts of the Danish DPA decision. Section IV, examines the reasoning and key findings of the Danish DPA decision. Finally, section V concludes with some general recommendations that the Danish municipalities must follow based on the ensuing effects stemming from this case.

UR - https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4189604

M3 - Journal article

VL - 8

SP - 405

EP - 411

JO - European Data Protection Law Review (EDPL)

JF - European Data Protection Law Review (EDPL)

IS - 3

ER -