The Spanish Data Protection Agency (AEPD) fined an educational center €20,000 (reduced to €12,000) for deploying Google Workspace for Education without properly informing families or obtaining lawful consent. An investigation triggered by a parent’s complaint revealed that the school processed the personal data of more than 500 students, including minors under 14, without a valid legal basis or a compliant data protection impact assessment regarding international data transfers.