The Danish Data Protection Agency asks local governments using Chromebooks to stop sending unnecessary data to Google

While Chromebooks are being used in schools as affordable PCs, some data is transmitted to Google during use. The Danish Data Protection Authority (DPA) has asked local governments to either stop transmitting data to Google or provide a reasonable explanation for the data transmission.

Datatilsynet giver påbud i Chromebook-sag

Denmark orders schools to stop sending student data to Google
https://www.bleepingcomputer.com/news/google/denmark-orders-schools-to-stop-sending-student-data-to-google/

Google's use of student data could effectively ban Chromebooks from Denmark schools - The Verge
https://www.theverge.com/2024/2/7/24065332/denmark-google-student-data-collection-privacy

This issue was first raised in 2019 by Jesper Glaugaard, a conservationist whose children use Chromebooks at school. When his children first came home with their Chromebooks, he was optimistic, thinking they would be learning about coding and the history and culture of technology. However, in reality, they were simply using them as pens and notebooks. Furthermore, when he learned that using them at school would require them to set up YouTube profiles, which would collect their children's full names, ages, school names, and classes, he said, 'This doesn't protect my children.'

Jesper Graugaard's Fight Against Chromebooks in Danish Schools (1/2) | Welcome to The Privacy Dad's Blog!
https://theprivacydad.com/the-privacy-dad-interviews-jesper-graugaard/

Glaugaard contacted the DPA and explained the problem to them, and they told him how to file a lawsuit and what documents he needed to file. Thanks to his efforts, the use of Chromebooks in schools in Helsingør, north of Copenhagen, has actually been banned.

However, 53 local governments continued to use Chromebooks.

The DPA conducted an investigation and determined that while local authorities have the authority to pass on student information for the purposes of providing services, improving the security and reliability of services, and communicating with students, the Folkehojskole Act on Education does not explicitly authorize the passing on of information for the purposes of maintaining, improving, or measuring the performance of Google Chrome, Chrome OS, or Google Workspace.

For this reason, the DPA has stated that there is no legal basis for transmitting data to Google, and is calling on local governments using Chromebooks to take appropriate measures. Specifically, they are required to ensure that personal information is not transmitted to Google for unauthorized purposes, and that if transmission is necessary, it is in accordance with the regulations.

The news site BleepingComputer points out that since it would be difficult to ask Google not to process the data it collects, the only realistic solution for local governments to meet the requirements of the DPA would be to stop using Chromebooks and Google Workspace.