CNIL. DANISH DPA. GA4 et proxyfication - Notre analyse - UnNest. Helmet libraries visitor tracking updated | Helmet. Helsinki Metropolitan Area Libraries (Helmet) have improved website users’ data security by replacing the site’s analytics tool in September 2022. However, in December, the Helmet library received a reprimand from the Deputy Data Protection Ombudsman about the previous use of Google Analytics on the site and the failure to adequately inform the clients regarding the site’s cookie policies. The Helmet.fi online service used Google Analytics for visitor tracking for website development, such as for statistics on the number of visitors and the most popular pages, starting from 2012. Google Analytics is still the most used website analytics tool in Finland and globally. Though previously a widely accepted visitor tracking tool, current stricter interpretations of data protection legislation mean that it can no longer be used.
The Helmet.fi service website (news, info, etc.) has been using Google Analytics cookies. Link to the press release by the Deputy Data Protection Ombudsman. Czech state websites: bye Google Analytics! - European Digital Rights (EDRi) The Czech organisation Iuridicum Remedium (IuRe) sent an open letter to the Ministry of Health in June 2021. It was mainly about the vaccination system, but its impact is much bigger: many state websites are getting rid of Google Analytics and thus taking more account of user privacy. The letter was followed by a meeting with representatives of the Ministry of Health and other stakeholders in October 2021.
Following the meeting, Google and Microsoft’s analytics tools disappeared from vaccination forms. These were also dealt with by the Czech Data Protection Authority in 2021. Subsequently, it was announced by the NAKIT (National Agency for Communication and Information Technologies) that the Google Analytics tool would disappear from the Ministry of Health´s website to be replaced by its own instance of the free analytics tool Matomo. The latter has a greater regard for user privacy and metadata should not be leaked outside the government environment. Libraries visitor tracking updated | Helmet. Divergence Among EU Data Protection Authorities as Spanish DPA Rules that the Use of Google Analytics Does Not Breach the GDPR | Orrick, Herrington & Sutcliffe LLP. In a recent decision, the AEPD (the Spanish data protection authority) became the first EU Data Protection Authority to reject one of the 101 complaints filed by privacy activist organisation, NOYB, against 101 European companies regarding their use of the Google Analytics tool.
The AEPD’s decision deviates from the positions previously adopted by the Austrian, French, Italian and Danish authorities. Background: The AEPD’s decision relates to a complaint made against the Royal Spanish Academy’s (RAE) (a public, not-for-profit institution tasked with safeguarding the Spanish language) use of Google Analytics on its Web site. In response to the NOYB complaint, RAE raised the following arguments: RAE’s sole and exclusive purpose for using the tool was to fulfil its mission to guarantee the development and preservation of the Spanish language, rather than for any commercial or business gain.
Decision: What does this mean in practice? EU Google Analytics Alternatives – #1. Like most data professionals in the EU, I have been looking at alternatives to Google Analytics that have “better” privacy compliance. The background to this is of course the Schrems II rulings that started appearing earlier in 2022 – see refresher article on the summary of Schrems II implications if needed. Also, recently the Danish privacy authority made an excellent summary and FAQ explaining (in English) their decision against the legal status of Google Analytics in the EU. In this post I am defining an alternative to Google Analytics as being an EU based analytics company. That is the simplest way of removing the data transfer issue and therefore passing the Schrems II test. Note that although the current Schrems II focus is on US tech because that is where most of it comes from, the issue applies equally to tech from other countries outside the EU.Also, see this related comment from @NOYB on the recent Presidential Executive Order.
The Alternatives Feature #1 – Private Clouds. Referral to the CNIL concerning the use of Google Analytics by many e-health actors | InterHop. Madam President of the CNIL, Following the Schrems II ruling, and the opinion rendered by the Commission Nationale de l’Informatique et des Libertés in October 2020 before the Council of State, under number 444937, we remind you that health data are sensitive data. Following the decision of the Austrian data protection authority having ruled on the use of Google Analytics, deemed illegal and contrary to the RGPD.
That is why we ask the CNIL : To analyze the consequences of the Schrems II jurisprudence on the use of the Google Analytics service concerning all e-health actors and more specifically on those under-mentioned ASKS the regulator to stop the processing that would be illegal. We have decided to make this letter public. This publicity contributes to the objective of transparency defended by your Commission. Thanking you for your attention to our request, please accept, Madam President, our most respectful regards. Done in Paris, January 28, 2021 InterHop Regarding the CNIL opinion. EDPS sanctions Parliament over EU-US Data Transfers to Google and Stripe. The European Data Protection Supervisor (EDPS) issued a decision after a complaint filed by noyb confirming that the European Parliament violated data protection law on its COVID testing website. The EDPS highlights that the use of Google Analytics and the payment provider Stripe (both US companies) violated the Court of Justice's (CJEU) "Schrems II" ruling on EU-US data transfers.
The ruling is one of the first decisions implementing "Schrems II" on the ground and may show the way for hundreds of other cases pending before regulators. Decision of the EDPS against the European Parliament (PDF) Complaint filed one year ago. Illegal data transfers to the US. In August 2020 noyb has filed 101 complaints against EU companies that included Google and Facebook functions on their websites. “The EDPS made it clear that even the placement of a cookie by a US provider is violating EU privacy laws. Confusing cookie banner. Unclear and irrelevant information. The Splintering of Global Data Flows: Is the ‘Risk-Based Approach’ Dead? Transfers & Google Analytics / Fonts: GDPR.
GDPR & transfers / Google Analytics enforcement - purpose of this webpage My paper of 24 Jan 2022, summarising post-Schrems II enforcement of the GDPR "transfers" restriction, covered the Austrian supervisory authority DSB's enforcement decision on using Google Analytics, the Google Fonts decision, the Cookiebot decision and the EDPS decision against the European Parliament on Analytics and Stripe, among others. But there's been a flood of other EU data protection authority decisions, court rulings or announcements on Google Analytics or other transfers issues since then. As I haven't had time to update my paper yet, on 1 Mar 2022 I created the list below of key links to such decisions etc. that I found out about after my paper was uploaded (in reverse chronological order). Some pre-dated 24 Jan, but I hadn't picked them up at the date of uploading.
Please also now see my Nov 2022 IAPP article. Please let me know of any other links to add? (All translations to English were made using... TechCrunch is part of the Yahoo family of brands. We, TechCrunch, are part of the Yahoo family of brands. By clicking ‘Accept all’ you agree that Yahoo and our partners will process your personal information, and use technologies such as cookies, to display personalised ads and content, for ad and content measurement, audience insights, and product development. The personal information that may be used Information about your device and internet connection, like your IP address Browsing and search activity while using Yahoo websites and apps Your precise location By clicking "Reject all" you reject all non-essential cookies and similar technologies, but Yahoo will continue to use essential cookies and similar technologies.
Select 'Manage settings' to manage your choices. Find out more about how we use your information in our Privacy Policy and Cookie Policy and change your choices at any time by visiting Your Privacy Controls.