Live data from Hacker News

Austria's data protection authority has found that Google Analytics is illegal

tutanota.com

141–150 of 237 posts

Re: Austria's data protection authority has found that Google Analytics is illegal

#141
post #80
post #64

Earlier quoted context omitted.

Looks great! But I feel that $9/month (up to 10k views) is a bit much for my personal website... I pay that much to Google now, but I get a whole suite of tools besides analyticsm, like email addresses (for my whole family under our surname as a domain, which is cool), my own domain (via GogoDaddy, but I got that via Google and pay Google only) and all the small business office tools they offer (though I think those…

Why do you need analytics for your personal website?

because he wants them and Google offers them at a very reasonable price, forcing people to use inferior products is bad

Re: Austria's data protection authority has found that Google Analytics is illegal

#142
post #2

The article seems to suggest that it's declared illegal in Austria. Does this somehow apply to the whole EU then?

The ruling which led to this conclusion was made back in July 2020. From the article: > This is a very detailed and sound decision. The bottom line is: Companies can't use US cloud services in Europe anymore. It has now been 1.5 years since the Court of Justice confirmed this a second time, so it is more than time that the law is also enforced. This article is addressing a specific case which follows from a previous…

Yeah, I also expect that after these 100+ cases we'll have a pretty clear consensus in most european countries about this.

Re: Austria's data protection authority has found that Google Analytics is illegal

#144

Earlier quoted context omitted.

Can’t this be solved by providing zero-knowledge encrypted services? Won’t work in all cases. But could work in some.

How does the consumer know it is zero-knowledge?

> How does the consumer know it is zero-knowledge?

The courts, not consumers, are the ultimate deciders in this situation. Companies say so under oath and a judge weighs the evidence.

Re: Austria's data protection authority has found that Google Analytics is illegal

#145

Earlier quoted context omitted.

Doesn’t work that way. This issue is that CloudFlare is a US company and can be compelled to disclose information to US Govt regardless of where they hold the data.

I came here to say this. People should read at least the Wikipedia summary for CLOUD act. It's classic US legislation, 'we don't care about borders when it suits us' style.

> It's classic US legislation, 'we don't care about borders when it suits us' style.

GDPR is written the same way.

i.e: https://gdpr.eu/article-3-requirements-of-handling-personal-...

Re: Austria's data protection authority has found that Google Analytics is illegal

#146

I've heard Google is working on a new cookie-less version of GA just like plausible and other privacy-focused GA alternatives. Wondering if this cookie-less GA would still come under the ban.

GDPR is about sharing personal data and tracking users. It doesn’t matter if it’s done via cookies or some other way.

Re: Austria's data protection authority has found that Google Analytics is illegal

#147
post #94

What does it mean these days to be a “European website” (or a “Canadian website”, etc)? The server is located in Europe? The domain name is owned by a company registered in Europe? What if a CDN serves the site from another location? What if the site is served in an iframe on a site in another location?

As far as I understand the decision is about US being able to order companies inside the US, to give them any data, even when that data origins from overseas.

So regarding your question, I guess the answer would be: A European website makes use only of services, which are not in danger of the US (or other countries from outside Europe) ordering the company to grant them access to the data. I guess this means, that you cannot use any services, which are offered by companies, which store data in the US and possibly even if they store it elsewhere, but fall under US law.

Re: Austria's data protection authority has found that Google Analytics is illegal

#148
post #83

Earlier quoted context omitted.

So they set up an EU subsidiary that's independent enough for CLOUD Act to not apply. Problem solved.

> for CLOUD Act to not apply If there is oversight from the US (i.e. it is still the owner), this is not possible.

Nope. I've heard some people talk about company constructions where you create a new officially unaffiliated company in the EU, that then just lends the IP to create a datacenter from the US-based companies, but I'm not sure if that's actually feasible.

Re: Austria's data protection authority has found that Google Analytics is illegal

#149
post #25

Earlier quoted context omitted.

They haven't shined in 25 years. We will just be forced to use inferior products.

Hetzner is the best hosting provider for dedicated servers (if you care about price). Gridscale is pretty good. The original Skype was a very solid product. Spotify still owns the digital music market.

I once worked in a non-tech company and was tasked with finding new hosting infrastructure for their web apps / sites. I proposed two dedicated servers from Hetzner for about 350 EUR / month. Instead of being happy about the small cost, the CEO rather said "that's too cheap to be any good!" and asked me to specifically to move the apps to AWS because some golf buddy and his company were using that. So now they're paying thousands instead of hundreds. But as long as the CEO is happy. I moved on because at the same time they were extremely stingy with salaries.

Re: Austria's data protection authority has found that Google Analytics is illegal

#150

Earlier quoted context omitted.

> Privacy law in the EU is harmonized In theory. Reality is quite far from that, as anyone on the ground can attest.

As someone 'on the ground' I see things moving in a much more uniform direction than where they were in the past, the differences are not large enough to make a fuss about. The thing to note is that the GDPR is a minimum set, local law is free to exceed the GDPR.

There is currently an EU member challenging the concept of European law’s primacy. Meanwhile, implementation of other courts’ rulings are delayed by years between jurisdictions.

There is zero chance, for instance, that anyone in Greece or Portugal or Ireland will be impacted, judicially, by this decision for several years. That’s better than before. But it’s far from e.g. a U.S. federal court ruling in California’s impact in New York, or a French court’s ruling in Paris in Marseille.

Post reply on HN