Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Use of Google Analytics declared illegal by French data protection authority

cnil.fr

Post reply on HN
Print view View original

201–210 of 1001 posts

Re: Use of Google Analytics declared illegal by French data protection authority

#201

Post by viro »

p_l wrote: post #109
tpetry wrote: post #33

Earlier quoted context omitted.

> Especially with these European intentions I frankly believe this is more of a political war against US and US-based companies. (No, I'm not from US as well) Yes, that's happening, and it's a good one. Privacy Shield was cancelled because of Schrems II. The US simply don't care (intentionally?) to protected any data of people not living in the US. With FISA (Foreign Intelligence Surveillance Act) or "Executive Order…

Let's add that NSA has long history of engaging in economic espionage, including against EU.

No post body was provided.

Re: Use of Google Analytics declared illegal by French data protection authority

#203

Post by iqanq »

tantalor wrote: post #196
dbbk wrote: post #158

Earlier quoted context omitted.

That's not at all the point. The issue here is data residency.

Asking permission for something users don't understand is tantamount to not asking in the first place.

Will you defrob my balancator? Of course not, because you don't know what it is. The same applies here: if you don't know what something means then say no. If you say yes then it's understood that you know what you signed up to.

Re: Use of Google Analytics declared illegal by French data protection authority

#204

Post by shadowgovt »

MereInterest wrote: post #59
qiqitori wrote: post #37

Earlier quoted context omitted.

People shouldn't have to be experts in this stuff either just to put up a website somewhere, or worse keep up with every new ruling.

If you want to toss some static HTML into a host, go for it. If you want to record statistics on how many page hits you had, go for it. If you want to add JavaScript for interactions and making it look prettier, go for it. But if you want to contribute to a privacy-violating network that tracks individual users, then that goes far beyond wanting "just to put up a website somewhere".

At this point, tossing some static text up with default apache configs runs afoul of GDPR opt-out and data-scrubbing requirements, IIUC.

Re: Use of Google Analytics declared illegal by French data protection authority

#205

Post by rightbyte »

Vespasian wrote: post #124
rightbyte wrote: post #75

Earlier quoted context omitted.

Surely Google has presense in France? Why not go after Google directly. It is way easier than processing 1000s of siteowners. Google are the ones spying. The aggregate put on GA dashboard are a minute of the personal info they collect.

Reasons: 1. Legal: It's the site owners integrating GA and therefore taking on the liabilities just like they do with every other supplier. When a part in your car fails immediately after you bought it, it's the manufacturers job to fix it even if they acquired the parts from a third party (e.g. Bosch). 2. Practical: A website 100% located in France and catering to 100% french customers is much more likely to fix the…

> the international anonymous machine that is Google.

Uber, Google etc really wants this to be true.

However, it is trivial for a nation state to shut down Google's commercial interest in the country.

Just have the police lock the door to their office and blacklist a bank account or two. If doing business with Google becomes illegal, they will lose almost all revenue except some indirect shell company ads.

Seems way less work to make Google compliant than to figure out which sites in French are actually French jurisdiction.

Re: Use of Google Analytics declared illegal by French data protection authority

#206

Post by cuu508 »

Spivak wrote: post #188
KingOfCoders wrote: post #130

Earlier quoted context omitted.

The point is more nuanced: The problem is not the handing over (happens here too), but the fact EU citizens do not get informed this has happend and have no legal way to challenge this (especially concerning FISA/FISC). They have the opportunity to do so in the EU. Yes, this is what will happen with a setup of 3 entities, b/c FANG will not want to miss EU revenue.

Right but the solution is for there to be a treaty between the US and the EU that allows for this. Putting the burden on every foreign company to duplicate their infrastructure is stupid work to solve a human problem.

> human problem

Incompatible laws problem

Re: Use of Google Analytics declared illegal by French data protection authority

#207

Post by jen20 »

viro wrote: post #187
AndrewDucker wrote: post #15

Earlier quoted context omitted.

People shouldnt need to be experts in data collection or computing in order to have their data treated fairly. If Google can't protect user's tracking data (and they can't - the US law won't let them) then they shouldn't be allowed to hold it.

Quoted post unavailable.

The argument is not that Google shouldn't hand over data with a warrant if it resides in an appropriate jurisdiction. The argument is that Google shouldn't have the data in that jurisdiction to hand over in the first place unless an individual user has given consent for that.

Re: Use of Google Analytics declared illegal by French data protection authority

#208

Post by viro »

XCSme wrote: post #197
viro wrote: post #156

Earlier quoted context omitted.

That's not the problem here at all tho.

Isn't it? Isn't the problem that the data is sent to a third-party service outside EU (in the US) that doesn't offer the same data-protection rules as EU?

nope, it's that the legal entity is required to honor US warrants. EU wants full control over that process.

Re: Use of Google Analytics declared illegal by French data protection authority

#209

Post by Dave3of5 »

iamacyborg wrote: post #140
Dave3of5 wrote: post #133

Don't quite understand this at all. Can we cut through the clickbait and see what's wrong here. If my website askes users for their permission to use GA and they click yes then is that still illegal here? I see this as yes it's still illegal. Also is it illegal because there is an anonymised id number created when you send data. If that's the case then it's not just GA that's a problem but any tracking system i.e. Pl…

> Can we cut through the clickbait and see what's wrong here. If my website askes users for their permission to use GA and they click yes then is that still illegal here? I see this as yes it's still illegal. Yes, because you're still passing personal data to the USA, which means US intelligence services can access it.

Is that the case for any data that is passed into the USA then rather than just GA?

So if I hosted my servers in any of the AWS US regions that too would be illegal if they have any personal data in them. In this case personal data is a randomised unique id. So say I have a table of users and all I have is a username and a password and a unique id for the record that's personal data and the customer is not allowed to give their permission for me to store that in a US data center ?

Post reply on HN