Data watchdog criticises Copenhagen over Teams use in schools

Copenhagen Municipality has received “serious criticism” over its use of Microsoft Teams for schoolchildren, according to DR. Denmark’s data protection authority, Datatilsynet, has now issued its decision in a case that began with a parent’s complaint in 2023.

The concern was that all pupils and employees in the municipality’s Children and Youth Administration could see children’s full names, schools and year groups on Teams. External users of the chat platform could also contact children if they knew their usernames.

DR previously reported that a nine-year-old boy at Guldberg School in Nørrebro received threats of violence from an older pupil at another school through Teams.

Henrik Eskelund, the boy’s parent, first contacted Copenhagen Municipality and later complained to Datatilsynet. He said he was pleased that the authority had finally reached a decision.

“I think it is unfortunate that, as a parent, you have to contact Datatilsynet to close an obvious security vulnerability,” Eskelund said.

In its decision, Datatilsynet urges Copenhagen Municipality to review the portfolio of IT services it uses for schools.

DR is seeking a comment from Jakob Næsager, Copenhagen’s mayor for children and youth. Datatilsynet said it was not available for an interview about the case.