IMY (Sweden) - IMY-2023-1647
| IMY - IMY-2023-1647 | |
|---|---|
 | |
| Authority: | IMY (Sweden) |
| Jurisdiction: | Sweden |
| Relevant Law: | Article 35(1) GDPR |
| Type: | Investigation |
| Outcome: | Violation Found |
| Started: | |
| Decided: | |
| Published: | |
| Fine: | 300,000 SEK |
| Parties: | n/a |
| National Case Number/Name: | IMY-2023-1647 |
| European Case Law Identifier: | n/a |
| Appeal: | n/a |
| Original Language(s): | Swedish |
| Original Source: | IMY-2023-1647 (in SV) |
| Initial Contributor: | sh |
The Swedish DPA fined Östersund's Childrens and Education Board 300,000 SEK (around €26,524) for failing to conduct a data protection impact assesment, as required by Article 35(1) GDPR, prior to installing Google Workspace for Education.
English Summary
Facts
Östersund has twenty-four schools that use Google Workspace since 2020. It is employed for communicating, teaching, and assigning and turning in homework. Google Workspace processed the personal data of 1,303 employees and 5,945 students, including names, email addresses, and class and group memberships. The Childrens and Education Board of the muncipality of Östersund is the data controller for the processing of personal data when the schools use Google Workspace.
In 2014 an impact assesment was conducted for google apps education. It was
Holding
X
Comment
Share your comments here!
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the Swedish original. Please refer to the Swedish original for more details.
