With a Data Transfer Impact Assessment (DTIA), SURF and SIVON have had the risks of international transfer of personal data mapped out. The study on Google Workspace for Education was conducted by Privacy Company.
The outcome of the DTIA is that there are no major risks to the transfer of personal data. "However, there are still two important measures that educational institutions themselves must take to reduce the transfer risks," says Sjoera Nas of Privacy Company. The first is choosing the option to store data in the European Union. This can only be done in the paid version of Workspace. The second is the use of client-side encryption with local key management, when users want to share special personal data via videoconferencing tool Meet.
"Schools can continue to safely use Google Workspace. To safely use Google Workspace, schools are advised to adjust certain settings and adopt the findings of SURF and SIVON. For some of the settings, these can only be adjusted in the paid version of Workspace for Education," SURF and SIVON announced.
