3 ms·
Because of the law in US that the governments have right to all data stored on any server that a US company or its subsidiaritets own. That clash with the EU GD
by poniko 3y ago
Because of the law in US that the governments have right to all data stored on any server that a US company or its subsidiaritets own. That clash with the EU GDPR law and the fact that Sweden categorize IP-adress as a Privacy data point.
I.e they can switch to a European vendor that do tracking and analytics.
- AbhiAmbad 3y agoyeah, This is the great option also.
- he0001 3y ago> the fact that Sweden categorize IP-adress as a Privacy data point Static IP-adresses are considered identity by EU court[0]. There have been several verdicts where EU court have ruled them subjective to GDPR. [0] https://curia.europa.eu/juris/liste.jsf?language=en&num=C-70/10 https://curia.europa.eu/juris/liste.jsf?language=en&num=C-70...
- poniko 3y agoyes? You can still store data within Sweden/EU that contains GDPR data, you just need to have a valid reason and comply with the GDPR rules i.e remove the data when you don't need them for the reason you where saving them. Store the data outside EU is never ok.
- alkonaut 3y agoBut if you wash the IP and any other PII then you can store it anywhere? So why store IP? Is it because GA doesn't offer an option to wipe PII from the messages?
- poniko 3y agoThis is where it gets tricky and why I need to find out more details about the new rulings. Google does not store IP when the user is from the EU but this still seems inadequate to the IMY. https://support.google.com/analytics/answer/12017362?hl=en https://support.google.com/analytics/answer/12017362?hl=en
- alkonaut 3y agoSo long as all PII is cleared client side and not merely dropped before storage I can’t see any issues with GDPR?