Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Use of Google Analytics declared illegal by French data protection authority

cnil.fr

Post reply on HN
Print view View original

261–270 of 1001 posts

Re: Use of Google Analytics declared illegal by French data protection authority

#261

Post by M2Ys4U »

can16358p wrote: post #159
qiqitori wrote: post #37

Earlier quoted context omitted.

People shouldn't have to be experts in this stuff either just to put up a website somewhere, or worse keep up with every new ruling.

This! GDPR is a big block towards technological improvement. Do virtually any business that involves user registration at some point, and now you need to be sure that you're compliant with all those rules, spending limited resources on that to avoid ridiculous fines. It benefits only the big players who has lawyers to know exactly what to do and not, and a nightmare for anyone who tries to grow a small business or ha…

> GDPR is a big block towards technological improvement.

It's exactly the opposite.

It forces technology to be developed in a way that protects human rights (specifically the right to privacy).

Innovation is not automatically good if you're innovating in the wrong direction. Think of it as a vector, not a scalar.

Re: Use of Google Analytics declared illegal by French data protection authority

#262

Post by iamacyborg »

dgudkov wrote: post #123

How can French websites track conversions from Google Adwords without Google Analytics?

Send your ad traffic to a specific landing page - monitor anonymised hits to that page.

Send you ad traffic to a unique form per campaign so you know what campaign is generating leads.

This isn't rocket science.

Re: Use of Google Analytics declared illegal by French data protection authority

#263

Post by M2Ys4U »

pyronik19 wrote: post #66
demindiro wrote: post #46

Earlier quoted context omitted.

You don't need GA for a website either. Many websites probably don't even need any form of analytics at all.

Do you really think we are in a better place now with GPDR and all these annoying cookie banners all over the place?

100%.

(Also, the GDPR is not responsible for cookie banners)

Re: Use of Google Analytics declared illegal by French data protection authority

#264

Post by xtracto »

p_l wrote: post #105
pyronik19 wrote: post #66

Earlier quoted context omitted.

Do you really think we are in a better place now with GPDR and all these annoying cookie banners all over the place?

You know those "cookie banners" are illegal under GDPR too, and done specifically to annoy people into agreeing?

This is so funny. Under GDPR everything is illegal, the only legal website is no website.

Good for Europe, they are just going to law themselves out of the internet. Up to the point were your ISP doing hops to send your TCP packet will be illegal unless you approve them sharing that info with all the shops.

Re: Use of Google Analytics declared illegal by French data protection authority

#265

Post by cnorthwood »

AdriaanvRossum wrote: post #233

For who needs a summary of what is happening in the EU [1] 1. Since 2020, it's illegal to send personal data to the US because of the invalidation of the Privacy Shield [2] 2. Google said it was okay in the EU to use anonymized IP addresses 3. The Austrian Data Protection Authority (DSB) [3] ruled differently and waived most of the arguments raised by Google. The DSB ruled that even anonymized IP addresses are person…

Point 1 isn't true. You've been able to send personal data (PII being the specific US legal term) to the US no problem - as long as you had "standard contractual clauses" (SCCs) as part of your contract with them that the company meets GDPR requirements. This is the same agreement to send data to any country outside the EU where there isn't a pre-existing agreement. I believe this ruling is saying that it's not possible for a US company to comply with the SCCs because US law doesn't allow them to do so.

Re: Use of Google Analytics declared illegal by French data protection authority

#267

Post by phkahler »

AdriaanvRossum wrote: post #233

For who needs a summary of what is happening in the EU [1] 1. Since 2020, it's illegal to send personal data to the US because of the invalidation of the Privacy Shield [2] 2. Google said it was okay in the EU to use anonymized IP addresses 3. The Austrian Data Protection Authority (DSB) [3] ruled differently and waived most of the arguments raised by Google. The DSB ruled that even anonymized IP addresses are person…

>> Since 2020, it's illegal to send PII (personally identifiable) data to the US because of the removal of the Privacy Shield Framework [

This sounds like some great politicized naming. Removal of the "Privacy Shield" seems to be increasing privacy in this case.

Re: Use of Google Analytics declared illegal by French data protection authority

#268

Post by ClumsyPilot »

londons_explore wrote: post #121
sfifs wrote: post #83

A lot of this seems to be coming due to US regulations that compel US registered companies to hand over data from subsidiaries in Europe markets if asked by US intelligence and law enforcement agencies. With these various data locality regulations, i wonder if a standard operating approach could be to split tech companies into 3 legal entities, a technology licensing company, a US registered operations company and a…

I think a lot of the big tech companies are very reluctant to split their operations inside/outside europe. They gain big benefits by having a single pool of datacenters able to serve users from anywhere in the world. If they needed to guarantee that an EU user would always be served with a machine in the EU, I can imagine it would add at least 20% to their operating costs. They'd need more equipment both inside and…

"I can imagine it would add at least 20% to their operating costs."

Why is everybody working on the assumption that all this data has to sit in the US?

Keep it in a country with the strict-est possible privacy laws, say Switzerland, and noone would complain.

Re: Use of Google Analytics declared illegal by French data protection authority

#269

Post by nickpp »

jen20 wrote: post #213
pyronik19 wrote: post #66

Earlier quoted context omitted.

Do you really think we are in a better place now with GPDR and all these annoying cookie banners all over the place?

Do you really think GDPR and cookie banners are related? Most are non-compliant in the first place, and were around for years beforehand. Yes, I think we're in a vastly better place, where there is a cost to doing bad things.

Unfortunately the cost in borne by us, regular EU internet users through a much degraded Internet browsing experience.

Re: Use of Google Analytics declared illegal by French data protection authority

#270

Post by xtracto »

RandomLensman wrote: post #38
heurisko wrote: post #21

Earlier quoted context omitted.

> Especially with these European intentions I frankly believe this is more of a political war against US and US-based companies. (No, I'm not from US as well) No, Germany is a big leader in the EU. They are very sensitive to issues around privacy, from the DDR era. They don't want private corporations having DDR-like folders of information on citizens.

But successive German governments really like the state to collect all communications data - so the sensitivity is very one-sided.

That's the funny thing: they are sensitive of data collection by corporations when the data collection during the DDR was done by the government, something that they surely dont care about.
Post reply on HN