The Norwegian Data Protection Authority (Datatilsynet) issued warnings of reprimand to three Norwegian municipalities for GDPR violations associated with their school-wide deployments of Google Chromebook and G Suite for Education. The regulator determined that the municipalities failed to perform adequate risk and privacy impact assessments, failed to establish a proper legal basis for data processing, and did not sufficiently inform students and parents about how their data would be processed and profiled.