PrivacyPod #16: First decisions against Google Analytics

We hope everyone had relaxing holidays, because the year has not started slow in the world of privacy! In this week’s episode we talk about all the development around Google Analytics and the GDPR – the Austrian DPA being the first national data protection authority to indicate that the use of the tool breaches the GDPR and the Schrems II judgment. In other news we look at the European Data Protection Supervisor’s decision against Europol and a legal study commissioned by the EDPS and the EDPB on government access in India, China and Russia (spoiler: the study has a rather negative outcome). EDPS orders Europol to erase data https://edps.europa.eu/system/files/2022-01/22-01-10-edps-decision-europol_en.pdf Legal study on government access in India, China and Russia https://edpb.europa.eu/system/files/2022-01/legalstudy_on_government_access_0.pdf Austrian DPA’s decision on Google Analyticshttps://gdprhub.eu/index.php?title=DSB_(Austria)_-_2021-0.586.257_(D155.027)#English_Summary Google’s response on privacy and Google Analytics https://blog.google/around-the-globe/google-europe/google-analytics-facts/ EDPS reprimand towards European Parliament – on use of cookies, data transfers https://noyb.eu/en/edps-sanctions-parliament-over-eu-us-data-transfers-google-and-stripe Dutch DPA giving first warning on Google Analytics https://autoriteitpersoonsgegevens.nl/nl/onderwerpen/internet-telefoon-tv-en-post/cookies#hoe-kan-ik-bij-google-analytics-de-privacy-van-mijn-websitebezoekers-beschermen-4898 CNIL’s guidance for data processors’ further use of data https://www.cnil.fr/fr/sous-traitants-la-reutilisation-de-donnees-confiees-par-un-responsable-de-traitement   We’d love to get feedback – so please tag us, follow us, DM us… or send us traditional email: Twitter: https://twitter.com/PodPrivacy, #privacypod Instagram: @privacypod LinkedIn: https://www.linkedin.com/company/tietosuojapod/about/ Email: [email protected]