Children’s data protection in education: A case study of Google Workspace for Education in the European Economic Area

Abstract

Digital technologies are increasingly embedded in education, transforming not only the means of delivery, but also its values and purposes. The COVID-19 pandemic has caused a significant surge in the edtech industry, resulting in greater involvement of private entities in shaping the future of education and processing extensive volumes of children’s data. Challenges related to protecting children’s data in this realm have already been raised by several authorities across Europe. This paper analyzes cases related to Google Workspace for Education through a data colonialism lens, seeking to understand the strengths and limitations of public authorities’ positions and whether the measures taken are adequate to address data protection issues associated with data colonialism. The findings suggest that an adequate enforcement of the General Data Protection Regulation is possible and powerful to protect children’s data. However, this demands strong political and economic power to ensure compliance. It also falls short of addressing broader challenges posed by the prevailing business model, including familiarizing children with technologies that process data for predatory commercial purposes outside the school environment, as well as concerns regarding competition, public procurement, and data sovereignty.