Introduction

Google Workspace for Education provides students with access to online learning tools to support their education. This site provides information on Google’s commitment to managing data collected during a student’s use of Workspace.

What data is collected?

Use of Google Workspace for Education will mean that students' personal information and data will be collected by Google for the purposes of providing the Google Workspace services to students.

This personal information will include the student’s department username and email address and all personal information that is contained in a Workspace service; such as information or data contained in a student’s calendar or email (including text, images, photographs, sound and multimedia).

Where is the data?

Google holds user data in its data centres that are located around the world.

 

How is the data used?

Google Workspace services do not collect or use students' personal information and data for advertising purposes or to create advertising profiles.

Google stores and processes personal information only to provide the Workspace for Education services. Google scans Gmail to keep its customers secure and to improve their product experience. In Gmail for Workspace, this includes virus and spam protection, spell check, relevant search results and features like Priority Inbox and auto-detection of calendar events. Scanning to provide product features is processed on all incoming emails and is 100% automated.

As part of providing its services, Google may also collect device information, log and location information as detailed in Google's Privacy Policy.

Google will only disclose this data at the direction of the NSW Department of Education or if compelled to do so by law.

Is the data secure?

Google is committed to protecting the privacy and security of all of their users, including students. Google has strong security systems in place to keep personal information secure, including an encrypted HTTPS connection.

Google’s physical data centre access is restricted to authorised personnel, and multiple layers of physical security are implemented. Google personnel are only able to access user data in extremely limited circumstances, and subject to rigorous approval and oversight.

When is data deleted?

Unless required by law, Google will delete customer-deleted data from its systems within a maximum of 180 days of the Department deleting a student’s account.

Is Google compliant with Australian data laws?

Google is IRAP assessed to meet the requirements to store protected data at an Australian Federal Government level.