Live data from Hacker News

Use of Google Analytics declared illegal by French data protection authority

cnil.fr

141–150 of 1001 posts

Re: Use of Google Analytics declared illegal by French data protection authority

#141
post #84

Earlier quoted context omitted.

Static websites can collect data too. Lots of stuff can go into web server logs.

And web server logs are fine for troubleshooting and detecting abuse, you don't even need to ask for consent! Only things like tracking, ads, and sending data to areas without equivalent privacy laws are forbidden. The intent and usage of the collected information is a big part of what is and isn't allowed.

Source? AFAIK web-server logs logging IPs are not allowed under GDPR.

Re: Use of Google Analytics declared illegal by French data protection authority

#142
post #70

I have just posted this link for everyone on the Slack of the french web agency - specialized in Google/Facebook/Instagram campaigns - I work for. Not one reaction. I was left on seen.

They're probably too busy wiping the coffee they sprayed through their noses onto their keyboard to type a response.

Re: Use of Google Analytics declared illegal by French data protection authority

#143
post #122

I contacted them approximately 4 years ago to denounce the developers of TrackMania that don't hash passwords [1]. I have not received an answer since, and I bet they do not even care. I'm sure they are a bunch of hypocrites and now that they've realized they can make a lot of money randomly fining Big Tech, this is just what they're going to do. [1]: If you clicked on "Password forgotten" on the log in page, they'd…

I've contacted them twice pre-GDRP era, about unsubscribe links not having any effect on some spam emails from French companies, and both time they took actions against the company and reported back to me. It took some times but they acted on every cases, no matter the company size, I was actually impressed.

I guess it's a matter of luck.

Re: Use of Google Analytics declared illegal by French data protection authority

#144

Don't quite understand this at all. Can we cut through the clickbait and see what's wrong here. If my website askes users for their permission to use GA and they click yes then is that still illegal here? I see this as yes it's still illegal. Also is it illegal because there is an anonymised id number created when you send data. If that's the case then it's not just GA that's a problem but any tracking system i.e. Pl…

There is the fact that in the EU you have the right to ask (and the business the obligation to comply) for your data to be deleted.

This is incompatible with your data being kept by a US business in the US, which is not subject to that law.

Re: Use of Google Analytics declared illegal by French data protection authority

#145
post #74

I don't like Google but seriously this whole GDPR thing is getting out of hand. Anyone who's concerned about their data being collected can just block Google-or-like-related domains. Rest is just making life of web developers/admins/tech company owners harder. Especially with these European intentions I frankly believe this is more of a political war against US and US-based companies. (No, I'm not from US as well)

> Rest is just making life of web developers/admins/tech company owners harder. So what ? The right to privacy is more important than a select few having an easier time doing business, end of story.

[deleted]

Re: Use of Google Analytics declared illegal by French data protection authority

#146

Earlier quoted context omitted.

But successive German governments really like the state to collect all communications data - so the sensitivity is very one-sided.

the major other difference being that I can democratically elect who is part of my government. I cannot do this in a US owned corporation.

Government surveillance on citizens has a long history of horrifying consequences, especially in Germany. What is the worst corporations are doing with our data? Better ads?!

Re: Use of Google Analytics declared illegal by French data protection authority

#147
post #83

A lot of this seems to be coming due to US regulations that compel US registered companies to hand over data from subsidiaries in Europe markets if asked by US intelligence and law enforcement agencies. With these various data locality regulations, i wonder if a standard operating approach could be to split tech companies into 3 legal entities, a technology licensing company, a US registered operations company and a…

I'm not sure such split would require sub-companies to be public, they could likely be private, owned by a single publicly traded US company. Tech companies already have many subsidiaries in countries that they have offices in, for example employees in European countries are not employed by a US company, but a subsidiary which is not publicly traded.

They already have EU subsidiaries. The problem seems to be that US laws seem to be able to compel US based parent companies to hand over data from their overseas subsidiaries.

If you make it a EU based public company and give control to your own shareholders, it's no longer a subsidiary and your shareholders are holding shares in a European company.

Re: Use of Google Analytics declared illegal by French data protection authority

#148

Is the CNIL actually starting to do its job? Since the early 2000's they were doing literally nothing against the many crimes against users committed by big tech. In the past few years though they started to distribute fines when the law was obviously and willingly broken (eg. Google)... did they suddenly start to care for users? or do they care that they can fill the pockets of the government (who doesn't dare to ta…

CNIL is just following Austria here

Re: Use of Google Analytics declared illegal by French data protection authority

#149
post #129

AFAIK, this could be pretty disastrous for French businesses that funnel conversion data to Google Analytics, which is then used to optimize their Google Search ads. Switching to another solution for analytics might be ok, but losing the ability to automatically optimize ads based on conversion data is a big pain.

It doesn't really matter micro targeting is not effective.

source? Since conventional wisdom disagrees with you.

Re: Use of Google Analytics declared illegal by French data protection authority

#150
post #28

Is anyone using an alternative that provides some basic analytics and isn't likely to get me in legal hot water in the future? I've already offloaded Google Fonts due to the German ruling. I'm happy to self-host piwik if needed, but could that fall foul of regulators?

I just started using Goatcounter for a noncommercial site (music history research blog) and I'm happy with it. All I wanted was a glorified hit counter. It doesn't have the goal conversion metrics and other advanced features of GA, so obviously not a drop-in replacement for all use cases. https://www.goatcounter.com/

happy goatcounter user here to, for the same reasons as you say, way less complex than GA but it has more metrics I care about.
Post reply on HN