Denmark: Issued Data Protection Agency decision on Google Workspace Usage in Danish Schools

On 30 January 2024, the Danish Data Protection Agency issued an order to municipalities regarding the use of Google Workspace in primary and lower secondary schools. The agency found that there was no legal basis for the transfer of personal data to Google for all current purposes. The municipalities must ensure that there is a legal basis for any processing that takes place. This could be achieved either by stopping the transfer of personal data to Google for these purposes, Google refraining from processing the data for these purposes, or by the Danish Parliament providing a clear legal basis for the transfer for these purposes. Municipalities must comply with the order starting 1 August 2024 and must indicate by 1 March 2024 how they intend to comply.