Live data from Hacker News

Italian watchdog bans use of Google Analytics

gpdp.it

171–180 of 614 posts

Re: Italian watchdog bans use of Google Analytics

#171

Earlier quoted context omitted.

This is just naive. Government offices/agencies are so tightly coupled with packages like office 365 that forcefully separating them would require home built solutions which would always be terrible, less secure, and more expensive to the tax payer. There’s a lot of good these products can provide, granted they are properly audited and have high security requirements.

ah, the ad hominem , never a good sign for the proceeding argument. there are a number of other office suites that are entirely adequate for bureaucratic organizations to build methodical processes around (which is what bureaucracies do). the capabilities of the underlying tools don’t matter much in this regard. also, audits aren’t meant to prove anything (like security), but instead to shift liability.

The average large organization uses over 100 SaaS products

https://www.statista.com/statistics/1233538/average-number-s...

I would love to see you replace all 100 of those with open source software.

Have you ever dealt with large technology migrations?

Re: Italian watchdog bans use of Google Analytics

#173

i’d support any legislation that booted google, fb, ms, adobe, salesforce, and a whole host of other surveillance tech companies from any and all levels of government. it’s literally as important as the separation of church and state. in fact, i’d love to see a constitutional amendment explicitly separating corporate interests from governmental ones, in all facets of civic life (e.g., campaign finance).

How far does "separating corporate interests from governmental ones" go? Can the government purchase a car? Hire a private corporation to build a road? Hire a consulting company to check the security of their (now-free-and-without-a-support-contract FOSS?) computer setup?

It's actually quite simple. The government can buy things services from specific providers, but it cannot force you to buy services from specific providers. In other words, it can buy BMWs for government use, but it cannot say "you have to buy a BMW to enter the municipal office".

The same applies to websites. If a government website uses Google analytics, it is essentially requiring you to do business with a specific company (in this case Google) in order to use a government service.

Re: Italian watchdog bans use of Google Analytics

#174

Earlier quoted context omitted.

Some time ago Google gave EU admins the option to select a local regional (EU) server. This means the data is not send to the US. But! It’s still nog fully legal as the Google HQ (and thus the US government( can still access all the data.

Why is that not fully legal? Wouldn't the same law prevent Google USA from querying PII data from Google Italia?

If Google US can access the data, that means the US government by extension can also. This is exactly what GDPR doesn’t want happening. More details in this open letter by Max Schrems “ the Court has clearly held that US surveillance laws and practices violate Article 7, 8 and 47 of the Charter of Fundamental Rights” https://noyb.eu/en/open-letter-future-eu-us-data-transfers

Re: Italian watchdog bans use of Google Analytics

#175

Good. US citizens should be, at least, disappointed that their government is so bad at protecting their privacy, that US law is so far behind the times. To those companies and people who find these EU decisions baffling or inconvenient: tough. If you had had respect for your users this would not be an issue. You would already not be spying on them. To website visitors: if you see a cookie banner, the site is asking p…

Yes “we care about privacy. But we also want a back door to all encrypted communications”.

https://appleinsider.com/articles/22/05/11/eu-plans-to-requi...

Re: Italian watchdog bans use of Google Analytics

#176
If I understand this correctly, the issue isn't Google Analytics specifically, but "because it transfers users’ data to the USA, which is a country without an adequate level of data protection".

So this could also apply to any company that sends PII to the USA?

Re: Italian watchdog bans use of Google Analytics

#177

Earlier quoted context omitted.

ah, the ad hominem , never a good sign for the proceeding argument. there are a number of other office suites that are entirely adequate for bureaucratic organizations to build methodical processes around (which is what bureaucracies do). the capabilities of the underlying tools don’t matter much in this regard. also, audits aren’t meant to prove anything (like security), but instead to shift liability.

The average large organization uses over 100 SaaS products https://www.statista.com/statistics/1233538/average-number-s... I would love to see you replace all 100 of those with open source software. Have you ever dealt with large technology migrations?

[deleted]

Re: Italian watchdog bans use of Google Analytics

#178

Good. US citizens should be, at least, disappointed that their government is so bad at protecting their privacy, that US law is so far behind the times. To those companies and people who find these EU decisions baffling or inconvenient: tough. If you had had respect for your users this would not be an issue. You would already not be spying on them. To website visitors: if you see a cookie banner, the site is asking p…

> To website visitors: if you see a cookie banner, the site is asking permission to spy on you. Or you know...count how many unique visitors they have and how to make the site more useful. Do you avoid using cookies on this site but still manage to log in?

Cookies needed to properly provide user authentication, i.e. user session identification, are counted as "technical necessary" cookies and do not need a cookie banner. You only need to ask for cookie consent, if you track visitors with third-party services. And, to counter your unique visitors claim: you don't need cookies, or any third party service, for that. Everything can be done locally without disrespecting user privacy.

Re: Italian watchdog bans use of Google Analytics

#179

i’d support any legislation that booted google, fb, ms, adobe, salesforce, and a whole host of other surveillance tech companies from any and all levels of government. it’s literally as important as the separation of church and state. in fact, i’d love to see a constitutional amendment explicitly separating corporate interests from governmental ones, in all facets of civic life (e.g., campaign finance).

> in fact, i’d love to see a constitutional amendment explicitly separating corporate interests from governmental ones

I don't think you comprehend the scope of what you're suggesting.

I work for a school district and I'm currently migrating our system from using one commercial bus routing service to another... using Windows, SQL Server, Teams, etc. from Microsoft... using a laptop, dock, three monitors, keyboard, and mouse from HP... and today the elevator was broken so we called a repair company to come fix it... oh, and some company makes the school buses, and the networked phone on my desk, and the printer around the corner, and all of the paper in it... the fluorescent bulbs above me don't grow on trees...

you can't just expect governments, even at the national level, to roll their own everything without interfacing with corporations in any way—this is a hopelessly naïve view of the world. I am just as uncomfortable as you are with data being shared with corporations, but you're going to have to figure out a more realistic set of political goals than what you've outlined here.

Re: Italian watchdog bans use of Google Analytics

#180

At what point do operators just start blocking access from EU countries. It's hard to imagine its worth jumping through all the complexities here at some point.

Sure. Block access to 450 millions people because it is inconvenient to respect their privacy.
Post reply on HN