Google Analytics Runs Afoul of GDPR

Robinson+Cole Data Privacy + Security Insider
Contact

[author: Blair Robinson]*

Recent reports from several European Data Protection Authorities (DPAs), the bodies empowered to regulate consumer privacy under the General Data Protection Regulation (GDPR), have ruled that Google Analytics violates the law. DPAs in Austria, France, and Italy have found that the tool, which allows website owners to track and analyze traffic to their sites, impermissibly passes European user data back to the United States without adequate safeguards. Other DPAs, including the Dutch Autoriteit Persoonsgegevens, are conducting similar investigations.

Google Analytics collects user data from cookies, including pages visited, browser information, operating system, screen resolution, selected language, date and time of page views, and the user device’s IP address. These decisions could have widespread implications for both Google and website owners because Google Analytics holds a majority market share for web analytics technologies. Other less prominent services could be in a similar bind as well. Data flows between the EU and USA have been in limbo since a European court struck down the U.S. Privacy Shield framework in Schrems II. While regulators agreed in principle on a new framework in March, a formal framework likely will not be announced until the end of the year. Until then, website operators serving European consumers should be on notice that their analytics services may land them in hot water with regulators. And with fines reaching as high as 4 percent of the business’s annual revenue, most organizations can’t afford to roll the dice.

*non-lawyer intern

[View source.]

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations. Attorney Advertising.

© Robinson+Cole Data Privacy + Security Insider

Written by:

Robinson+Cole Data Privacy + Security Insider
Contact
more
less

PUBLISH YOUR CONTENT ON JD SUPRA NOW

  • Increased visibility
  • Actionable analytics
  • Ongoing guidance

Robinson+Cole Data Privacy + Security Insider on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide