#google-analytics

harald@hub.volse.no

noyb win: First major fine (€ 1 million) for using Google Analytics

Swedish data protection authority (IMY) issued decisions against four companies and imposed a fine of 12 mio SEK (1 mio Euro) against Tele2 and 300.000 SEK against CDON for using Google Analytics on their webpage. Although many other European authorities (e.g. Austria, France and Italy) already found that the use of Google Analytics violates the GDPR, this is the first financial penalty imposed on companies for using Google Analytics, despite the CJEU's rulings on EU-US data transfers.

Finally there's some small steps to start to enforce these rulings. Hoping that this will set a precedent and inspire more DPAs to follow suit.

#GDPR #SurveillanceCapitalism #google-analytics

harald@hub.volse.no

UPDATE on 101 complaints: Austrian DPA rejects “risk based approach” for data transfers to third countries

Some dalmatians with a "101 us transfer complaints - update" banner above them.

The Austrian DSB also rejected Google’s arguments that websites could activate IP anonymization when using tools like Google Analytics to effectively protect the transferred data from surveillance. This was rejected for two reasons: first, Google’ IP anonymisation only affects the IP address as such. Data such as online-identifiers set per cookies or device data are transferred in the clear. Second, the IP anonymization only takes place after the data have been transferred to Google.

(My emphasis)

It's great to see that finally the regulators begin to understand how the web works. I've been arguing this for years towards public institutions thinking it's possible to use GA in a privacy respecting manner. There's a reason Google give you these tools at no monetary cost! It's not because it's free.

https://noyb.eu/en/update-noybs-101-complaints-austrian-dpa-rejects-risk-based-approach-data-transfers-third-countries

#gdpr #privacy #google #google-analytics