Google Workspace for Education in Schools: What Families Can Do if They Do Not Want to Authorize Its Use
The use of digital platforms in schools stopped being an exception years ago. Tools such as Google Workspace for Education (formerly G Suite for Education) have become standard in many educational institutions for managing email accounts, virtual classrooms, shared documents, and video calls.
However, more and more families are asking a legitimate question: can they refuse to allow their children to use Google Workspace at school?
The short answer is yes — although there are important nuances and rights that families should be aware of.
Why Is Google Workspace for Education Controversial?
This debate is not new. For years, concerns have existed regarding how children’s personal data is processed through educational digital platforms.
The main issue is that, although Google formally acts as a “data processor” on behalf of the school, students are still minors and the data involved may be particularly sensitive: names, email addresses, schoolwork, internal communications, usage habits, and digital activity.
It is also important to distinguish between:
- Core services (Gmail, Classroom, Drive, Calendar).
- Additional services (YouTube, Maps, Blogger, etc.).
This distinction matters because Google applies different data processing conditions and purposes depending on the service involved.
The Current Legal Situation: Schools Cannot Do Anything They Want
Many schools assume they can use these tools simply because they are common or widely adopted by other institutions. Legally, however, the situation is much more complex.
Recently, the Spanish Data Protection Authority (AEPD) sanctioned a school for deficiencies related to the use of Google Workspace for Education. Among other issues, the authority considered the information provided to families insufficient and questioned whether all data processing activities could automatically rely on the school’s educational function as a legal basis.
This is particularly important:
The fact that a tool is pedagogically useful does not eliminate data protection obligations.
Schools must be able to demonstrate, among other things:
- The legal basis that legitimizes the processing.
- That families have been properly informed.
- That there is an adequate data processing agreement with Google.
- That risks to children’s rights have been assessed.
- That international data transfers comply with the GDPR.
In some cases, schools may also need to determine whether certain additional services require explicit parental consent.
Can Families Refuse?
Families have the right to:
1. Receive Clear and Complete Information
Schools must transparently explain:
- Which tools are being used.
- What data is processed.
- For what purpose.
- Who has access.
- Where the data is stored.
- Whether international transfers exist.
- How long the data will be retained.
A generic clause in the enrollment documentation or a vague reference to “digital platforms” is not enough.
2. Request Alternatives
One of the most sensitive issues is what happens when a family does not want their child to use Google Workspace.
It is important to understand that the child’s right to education prevails, but this does not necessarily mean that schools can impose any digital platform without offering alternatives.
If the data processing is not strictly necessary or if less invasive alternatives exist, families may request reasonable alternative measures.
Especially when:
- Very young children are involved.
- Additional Google services are used.
- Or the school has not properly justified the necessity of the platform.
3. Exercise Data Protection Rights
Families may exercise the rights established under the GDPR:
- Right of access.
- Rectification.
- Objection.
- Restriction of processing.
- Erasure (where applicable).
They may also request copies of:
- Privacy policies.
- Data protection impact assessments.
- Or data processing agreements.
The Biggest Mistake: Confusing Digitalization with Automatic Consent
The digital transformation of education is a reality and probably irreversible. But digitalization does not mean eliminating legal safeguards.
In fact, the processing of children’s data requires an even higher level of diligence, transparency, and proportionality.
Many schools act in good faith and use Google Workspace because it is efficient, free, and widely implemented. However, this does not exempt them from:
- Complying with the GDPR.
- Properly justifying data processing activities.
- Respecting families’ rights.
What Do We Recommend to Families?
If you have concerns about the use of Google Workspace for Education at your children’s school:
- Request written information about the data processing.
- Review which services are actually being used.
- Ask whether a data protection impact assessment exists.
- Check whether additional Google services are enabled.
- Request alternatives if you do not agree with the processing.
And above all:
Avoid normalizing the idea that any digital tool is acceptable simply because “everyone else uses it.”
When children’s personal data is involved, convenience should never take precedence over fundamental rights.
Author: Victor Roselló, Lawyer.
If you need help writing Data Protection regulations, contact us!
you need help writing Data Protection regulations, contact us!
Information on data protection
Company name
LEGAL IT GLOBAL 2017, SLP
Purpose
Providing the service.
Sending the newsletter.
Legal basis
Compliance with the service provision. Consent.
Recipients
Your data will not be shared with any third party, except service providers with which we have signed a valid service agreement.
Rights
You may access, rectify or delete your data and exercise the rights indicated in our Privacy Policy.
Further information
See the Privacy Policy.
