4 ms·

For who needs a summary of what is happening in the EU [1] 1. Since 2020, it's illegal to send personal data to the US because of the invalidation of the Priva

For who needs a summary of what is happening in the EU [1] 1. Since 2020, it's illegal to send personal data to the US because of the invalidation of the Privacy Shield [2] 2. Google said it was okay in the EU to use anonymized IP addresses 3. The Austrian Data Protection Authority (DSB) [3] ruled differently and waived most of the arguments raised by Google. The DSB ruled that even anonymized IP addresses are personal data. 4. The Data Protection Authority of The Netherlands followed by implying that the use of Google Analytics might be banned in the future [4] 5. In February 2022 The Data Protection Authority of France (CNIL) followed [5] 6. In June 2022 the Data Protection Authority of Italy (Garante) followed [6] 7. September 2022, Denmark – after already banning Google Workspace for municipalities [7] – considers Google Analytics unlawful as well [8] 8. Now, February 2023, Finland rules against the use of Google Analytics [9] This is a sound decision, but – as others pointed out – not a new one. It's a confirmation of what has been ruled in July 2020, but now it seems to have more impact when it happens per country. PS: I'm the founder of Simple Analytics [10] - the privacy-first analytics tool that, unlike other privacy tools, does not use any identifiers. [1] https://www.simpleanalytics.com/blog/will-google-analytics-be-banned-in-the-eu https://www.simpleanalytics.com/blog/will-google-analytics-b... [2] https://iapp.org/news/a/the-schrems-ii-decision-eu-us-data-transfers-in-question/ https://iapp.org/news/a/the-schrems-ii-decision-eu-us-data-t... [3] https://www.data-protection-authority.gv.at/ https://www.data-protection-authority.gv.at/ [4] https://autoriteitpersoonsgegevens.nl/nl/onderwerpen/internet-telefoon-tv-en-post/cookies#hoe-kan-ik-bij-google-analytics-de-privacy-van-mijn-websitebezoekers-beschermen-4898 https://autoriteitpersoonsgegevens.nl/nl/onderwerpen/interne... (in Dutch) [5] https://www.cnil.fr/en/use-google-analytics-and-data-transfers-united-states-cnil-orders-website-manageroperator-comply https://www.cnil.fr/en/use-google-analytics-and-data-transfe... [6] https://www.gpdp.it/web/guest/home/docweb/-/docweb-display/docweb/9782874#english https://www.gpdp.it/web/guest/home/docweb/-/docweb-display/d... [7] https://www.simpleanalytics.com/blog/denmark-bans-google-workspace-for-municipalities https://www.simpleanalytics.com/blog/denmark-bans-google-wor... (includes translated version) [8] https://www.datatilsynet.dk/english/google-analytics/use-of-google-analytics-for-web-analytics https://www.datatilsynet.dk/english/google-analytics/use-of-... [9] https://www.simpleanalytics.com/blog/finland-is-latest-eu-country-to-crack-down-on-google-analytics https://www.simpleanalytics.com/blog/finland-is-latest-eu-co... [10] https://www.simpleanalytics.com/ https://www.simpleanalytics.com/

granzymes 4y ago
Privacy Shield died in 2020, but as of 2023 the US has a new agreement with the EU [0] with additional safeguards preventing the US government from accessing certain data. This moots all the prior decisions based on Privacy Shield's demise. [0] https://www.privacyshield.gov/article?id=EU-U-S-Privacy-Shield-Program-Update https://www.privacyshield.gov/article?id=EU-U-S-Privacy-Shie...
- AdriaanvRossum 4y ago
  There is only a draft [0] which needs to be voted by EU Member States in order to become effective. That might end up with a Schrems III ruling when it comes into effect. [0] https://www.simpleanalytics.com/blog/how-to-move-forward-with-data-transfers-between-the-eu-us#updates https://www.simpleanalytics.com/blog/how-to-move-forward-wit...
  - granzymes 4y ago
    The EU and US signed an agreement-in-principle. The final ratification will happen as soon as ~March (but could realistically take until summer). The US already implemented their portion of the agreement. No matter how many agreements it takes, the US and the EU will ensure that data transfer between the continents is possible. There's too much trade at risk otherwise.
    - AdriaanvRossum 4y ago
      I would not be that sure. They didn't get to an agreement since 2020. It's 2023 now. Still no agreement. To be fair: the US killed the previous pre-2020 agreement.
      - granzymes 4y ago
        It took until 2022 to get an agreement-in-principle signed, but that's government for you. A two year turnaround on negotiation plus a year to get it implemented is honestly lightning speed all things considered.

granzymes 4y ago

Privacy Shield died in 2020, but as of 2023 the US has a new agreement with the EU [0] with additional safeguards preventing the US government from accessing certain data. This moots all the prior decisions based on Privacy Shield's demise. [0] https://www.privacyshield.gov/article?id=EU-U-S-Privacy-Shield-Program-Update https://www.privacyshield.gov/article?id=EU-U-S-Privacy-Shie...

AdriaanvRossum 4y ago
There is only a draft [0] which needs to be voted by EU Member States in order to become effective. That might end up with a Schrems III ruling when it comes into effect. [0] https://www.simpleanalytics.com/blog/how-to-move-forward-with-data-transfers-between-the-eu-us#updates https://www.simpleanalytics.com/blog/how-to-move-forward-wit...
- granzymes 4y ago
  The EU and US signed an agreement-in-principle. The final ratification will happen as soon as ~March (but could realistically take until summer). The US already implemented their portion of the agreement. No matter how many agreements it takes, the US and the EU will ensure that data transfer between the continents is possible. There's too much trade at risk otherwise.
  - AdriaanvRossum 4y ago
    I would not be that sure. They didn't get to an agreement since 2020. It's 2023 now. Still no agreement. To be fair: the US killed the previous pre-2020 agreement.
    - granzymes 4y ago
      It took until 2022 to get an agreement-in-principle signed, but that's government for you. A two year turnaround on negotiation plus a year to get it implemented is honestly lightning speed all things considered.