Mervinskiy 516

DPIA Google G Suite Enterprise for SLM Rijk | 9 July 2020, with update 12 February 2021

3.1

Privacy controls G Suite account for end users As explained in Section 1.4.2, government employees must create a Google Account to use the G Suite services. New end users are shown a welcome message (see Figure 6) and are required to accept the Google Terms of Service and the Google Privacy Policy. Figure 16: Google Account home screen, four controls for end users

Once the Google Account is created, as shown in Figure 16 above, end users of G Suite Enterprise are informed by Google about four topics on their account dashboard page accessible via myaccount.google.com • • • •

Privacy & personalization Security issues found Account storage Take the Privacy Check-up

When selecting ‘Privacy & personalization’, Google shows nine different topics: 1. Take the Privacy Check-up 2. Activity controls (Web & App Activity, YouTube History and Ad personalization) 3. Ad personalization 4. Activity and timeline 5. Things you create and do 6. Account storage 7. Download or delete your data 8. General preferences for the web 9. Reservations

Mervinskiy 516

Articles inside

Conclusions

17.4 Google measures 12 February 2021

16.3 Summary of risks

16.2 Assessment of Risks

15.7 Right to file a complaint

15.3 Right to access

14.3 Assessment of the subsidiarity

14.1 The principle of proportionality

14.2 Assessment of the proportionality

12.1 Transfer of special, sensitive, secret and confidential data to the USA

11.3 Google’s own legitimate business purposes

all Diagnostic Data

Services

Part B. Lawfulness of the data processing

8.1 Anonymisation

6.3 Joint interests

6.2 Interests of Google

6.1 Interests of the Dutch government organisations

5.2 Data processor

5.3 Data controller

5.4 Joint controllers

4.4 Specific purposes Chrome OS and the Chrome browser

5.1 Definitions

4.3 Purposes Additional Services and Google Account, when not used in a Core Service

4.2 Purposes Google

4.1 Purposes government organisations

2.5 Types of personal data and data subjects

3.2 Privacy controls administrators

3.1 Privacy controls G Suite account for end users

2.3 Outgoing traffic analysis

2.4 Results access requests

2.2 Diagnostic Data

Related services that may send Customer Data to Google, such as the Feedback form and the Enhanced Spellchecker in the Chrome browser.

2.1 Definitions of different types of personal data

Part A. Description of the data processing

The enrolment framework for G Suite Enterprise

G Suite Core Services, Google Account, Support Services, Additional Services, and Other related services

Functional Data

Introduction

1 Legal framework and contractual arrangements between government organisations and