6 ms·

I keep seeing these and wondering why Google isn't doing anything about this. Surely it should at the very least tell Google Analytics users based out of the EU

by dom96 4y ago

I keep seeing these and wondering why Google isn't doing anything about this. Surely it should at the very least tell Google Analytics users based out of the EU that they need to stop using its services? Isn't Google in hot water here for not doing this?

Bakary 4y ago
So far the fines have been laughable compared to their revenue
- openplatypus 4y ago
  In case of GA be aware that Google is merely a Data Processor. You, the website operator are the Data Controller in this relationship. If you use GA for web analytics it is website operator problem, not Google's.
anothernewdude 4y ago
More people that actually use GA, the less bad it will be. If everybody does it, it becomes De Facto legal, and makes it clear how little authority the Danish government has. Laws that aren't enforced, or that have little bite, aren't really laws.
deleted 4y ago
[deleted]
SpicyLemonZest 4y ago
Google's position (https://blog.google/around-the-globe/google-europe/its-time-for-a-new-eu-us-data-transfer-framework/ https://blog.google/around-the-globe/google-europe/its-time-...), which broadly aligns with my own understanding of the situation, is that this is a proxy battle and the only real solution is to negotiate a new EU-US privacy shield. The premise of these decisions isn't that Google itself has any known privacy or security issues, but that any servers which are physically located in the US can't be trusted under EU privacy laws.
- deleted 4y ago
  [deleted]
- trasz 4y ago
  Would that “shield” prevent US agencies from accessing data related to EU citizens?
  - SpicyLemonZest 4y ago
    The GDPR doesn't require that foreign law enforcement agencies should never be allowed to access personal data. There just have to be equivalent legal protections to what a EU citizen would get from their local law enforcement agencies. There are already a solid handful of countries (https://gdpr-info.eu/issues/third-countries/ https://gdpr-info.eu/issues/third-countries/) where data transfer is considered secure and I don't see any reason it should be impossible to negotiate a US return to the list.
  - lokedhs 4y ago
    That's what it's supposed to do. Well, perhaps not prevent it, but add oversight and the ability to appeal. The US is obviously not going to do this, so whatever agreement they come up with is bound to be struck down just like the previous two were.

by dom96 4y ago

Bakary 4y ago

So far the fines have been laughable compared to their revenue

openplatypus 4y ago
In case of GA be aware that Google is merely a Data Processor. You, the website operator are the Data Controller in this relationship. If you use GA for web analytics it is website operator problem, not Google's.

anothernewdude 4y ago

More people that actually use GA, the less bad it will be. If everybody does it, it becomes De Facto legal, and makes it clear how little authority the Danish government has. Laws that aren't enforced, or that have little bite, aren't really laws.

deleted 4y ago

[deleted]

SpicyLemonZest 4y ago

Google's position (https://blog.google/around-the-globe/google-europe/its-time-for-a-new-eu-us-data-transfer-framework/ https://blog.google/around-the-globe/google-europe/its-time-...), which broadly aligns with my own understanding of the situation, is that this is a proxy battle and the only real solution is to negotiate a new EU-US privacy shield. The premise of these decisions isn't that Google itself has any known privacy or security issues, but that any servers which are physically located in the US can't be trusted under EU privacy laws.

deleted 4y ago
[deleted]
trasz 4y ago
Would that “shield” prevent US agencies from accessing data related to EU citizens?
- SpicyLemonZest 4y ago
  The GDPR doesn't require that foreign law enforcement agencies should never be allowed to access personal data. There just have to be equivalent legal protections to what a EU citizen would get from their local law enforcement agencies. There are already a solid handful of countries (https://gdpr-info.eu/issues/third-countries/ https://gdpr-info.eu/issues/third-countries/) where data transfer is considered secure and I don't see any reason it should be impossible to negotiate a US return to the list.
- lokedhs 4y ago
  That's what it's supposed to do. Well, perhaps not prevent it, but add oversight and the ability to appeal. The US is obviously not going to do this, so whatever agreement they come up with is bound to be struck down just like the previous two were.