The Danish data protection authority (DPA), Datatilsynet, has issued an injunction against the transfer of student data to Google via Chromebooks and Google Workspace in 53 municipalities.
The decision follows a four-year complaint by activist Jesper Graugaard, highlighting privacy concerns and potential data misuse. Datatilsynet ruled the current data transfer lacks a legal basis for all disclosed purposes. Municipalities are ordered to cease specific data transfers or establish legal bases, document data processing, and ensure Google refrains from non-compliant purposes.