Live data from Hacker News

Use of Google Analytics declared illegal by French data protection authority

cnil.fr

11–20 of 1001 posts

Re: Use of Google Analytics declared illegal by French data protection authority

#11
Is anyone using an alternative that provides some basic analytics and isn't likely to get me in legal hot water in the future?

I've already offloaded Google Fonts due to the German ruling. I'm happy to self-host piwik if needed, but could that fall foul of regulators?

Re: Use of Google Analytics declared illegal by French data protection authority

#12

I don't like Google but seriously this whole GDPR thing is getting out of hand. Anyone who's concerned about their data being collected can just block Google-or-like-related domains. Rest is just making life of web developers/admins/tech company owners harder. Especially with these European intentions I frankly believe this is more of a political war against US and US-based companies. (No, I'm not from US as well)

> can just block Google-or-like-related domains

Got a grandmother?

Re: Use of Google Analytics declared illegal by French data protection authority

#13
post #5

The onus is on Google to suspend or anonymize Analytics. Individual Website managers can't be expected to discriminate based on geographical origin, as the document seems to imply.

If Google does not do so or fails to do so adequately, then the onus is on website owners to stop using a service which does not allow them to meet their data protection obligations. The data controller can't offload all responsibility to the data processor, in GDPR terms.

Yes, this is correct. GA could make the controller's lives easier, but it isn't ultimately responsible for this.

Re: Use of Google Analytics declared illegal by French data protection authority

#14
post #12

I don't like Google but seriously this whole GDPR thing is getting out of hand. Anyone who's concerned about their data being collected can just block Google-or-like-related domains. Rest is just making life of web developers/admins/tech company owners harder. Especially with these European intentions I frankly believe this is more of a political war against US and US-based companies. (No, I'm not from US as well)

> can just block Google-or-like-related domains Got a grandmother?

Who's concerned about Google collecting data? No.

Re: Use of Google Analytics declared illegal by French data protection authority

#15

I don't like Google but seriously this whole GDPR thing is getting out of hand. Anyone who's concerned about their data being collected can just block Google-or-like-related domains. Rest is just making life of web developers/admins/tech company owners harder. Especially with these European intentions I frankly believe this is more of a political war against US and US-based companies. (No, I'm not from US as well)

People shouldnt need to be experts in data collection or computing in order to have their data treated fairly.

If Google can't protect user's tracking data (and they can't - the US law won't let them) then they shouldn't be allowed to hold it.

Re: Use of Google Analytics declared illegal by French data protection authority

#16

I don't like Google but seriously this whole GDPR thing is getting out of hand. Anyone who's concerned about their data being collected can just block Google-or-like-related domains. Rest is just making life of web developers/admins/tech company owners harder. Especially with these European intentions I frankly believe this is more of a political war against US and US-based companies. (No, I'm not from US as well)

Have you seen the list of companies that typically show up when you opt-out of data-sharing? It's frequently in the hundreds. I'm incredibly sick of them so frequently starting with "Your privacy is very important to us" immediately followed by "So we're going to share your data with these 100 anonymously named shell and reseller corporations."

It's not GDPR making life harder for companies, it's the shadowy practices of businesses that are finally being brought to light.

Source: US Citizen, living in EU.

Re: Use of Google Analytics declared illegal by French data protection authority

#17

I don't like Google but seriously this whole GDPR thing is getting out of hand. Anyone who's concerned about their data being collected can just block Google-or-like-related domains. Rest is just making life of web developers/admins/tech company owners harder. Especially with these European intentions I frankly believe this is more of a political war against US and US-based companies. (No, I'm not from US as well)

> Rest is just making life of web developers/admins/tech company owners harder.

there are hundreds of alternatives to Google Analytics, developers/admin/companies should just choose wisely. That's what the GDPR is about: end of free lunch for everybody at the expenses of people's privacy, choose your shit carefully.

Re: Use of Google Analytics declared illegal by French data protection authority

#18

I don't like Google but seriously this whole GDPR thing is getting out of hand. Anyone who's concerned about their data being collected can just block Google-or-like-related domains. Rest is just making life of web developers/admins/tech company owners harder. Especially with these European intentions I frankly believe this is more of a political war against US and US-based companies. (No, I'm not from US as well)

I don't want to comment on GDPR, but you must be kidding with 'can just block'. Do you expect that average joe can do that ? It like saying, we don't need police you can simply defend your self.

Re: Use of Google Analytics declared illegal by French data protection authority

#19

The onus is on Google to suspend or anonymize Analytics. Individual Website managers can't be expected to discriminate based on geographical origin, as the document seems to imply.

It's worth noting that GA4 does this already. GA3 (AKA Universal Analytics) requires owners to set the anonymize_ip flag though. I agree that Google should have retroactively changed this policy for GA3 accounts, even if it would cause some breakage. https://support.google.com/analytics/answer/2763052?hl=en

The English post from CNIL makes it clear it's not just IP that's the issue:

>In this context, a unique identifier is assigned to each visitor. This identifier (which constitutes personal data) and the associated data are transferred by Google to the United States.

Re: Use of Google Analytics declared illegal by French data protection authority

#20
post #12

Earlier quoted context omitted.

> can just block Google-or-like-related domains Got a grandmother?

Who's concerned about Google collecting data? No.

So you are not concerned about your grandmother ?
Post reply on HN