Are Chrome Browser extensions generally safe to enable for teachers and office staff?

[TwistedHelixis]

Just been asked to enable an extension from the Chrome web Store.

 

Its hard to know if something like this is safe to enable or not.

 

They have the following

Quote

Privacy Policy 
By design, your data stays at all times on your Google account, never saved in our database. Your data aren’t shared with anyone, including the add-on owner. 
We complies with privacy laws (especially GDPR & California Privacy Act) to protect your data. 
All data you upload are automatically deleted every day.

This developer declares that your data is
Not being sold to third parties, outside of the approved use cases
Not being used or transferred for purposes that are unrelated to the item's core functionality
Not being used or transferred to determine creditworthiness or for lending purposes

 

How do you handle these sorts of requests?

[paulkerton]

It really depends on the extension. We don't just enable anything willy nilly. We will do checks on who develops it, when it was last updated, what they advertise in regards to privacy policies etc.

 

[synaesthesia]

Treat it like any other software, free, paid etc. DPIA if required. A bit of common sense is enough for the majority of them.

[TwistedHelixis]

This one connects to docs, slides and sheets, which makes me a bit worried.

[Chris_Cook]

It really boils down to:

 

1. What are they doing with your data?

2. Have they had an independent cyber security audit for code and systems?

3. Has it been designed and built with someone with the required knowledge, experience and training in this area?

4. Do you trust what they have said about 1 - 3

 

Extensions have lots of access to your browser. Would you feel comfortable if the developer was watching over your shoulder whilst your doing you work?