Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Use of Google Analytics declared illegal by French data protection authority

cnil.fr

Post reply on HN
Print view View original

241–250 of 1001 posts

Re: Use of Google Analytics declared illegal by French data protection authority

#241

Post by M2Ys4U »

keraf wrote: post #71

Articles mention GA, but is Metrica[0] similarly affected? I guess their data is also stored outside the EU. [0] https://metrica.yandex.com

They store data in Russia, so probably.

Each jurisdiction is going to be slightly different, depending on what the law regarding data protection is like in each place.

Russia hasn't been deemed adequate by the Commission under the GDPR, but it is a member of the Council of Europe (and is thus bound by the ECHR) and it has ratified Convention 108 (and has signed, but not ratified, the modernised Convention 108).

Of course Russia is a deeply authoritarian regime which has no problem violating human rights and international treaties at will so...

Re: Use of Google Analytics declared illegal by French data protection authority

#242

Post by im3w1l »

iamacyborg wrote: post #228
im3w1l wrote: post #221

Earlier quoted context omitted.

If my website is hosted on a server located in the US, then is this illegal? Serious question. Assume it's a static site and that I don't collect any data myself whatsoever. But who knows what the server operator could be doing covertly? If this doesn't cut the internet in two, I don't get where the line goes.

Are you hosting and processing personal data (including IP) on your server? It might be.

Ninja edited.

Re: Use of Google Analytics declared illegal by French data protection authority

#243

Post by jdrc »

lopis wrote: post #229
jdrc wrote: post #211

Earlier quoted context omitted.

is google making a lot of money from analytics?

Maybe not directly, but analytics is what allowed Google to "see" the whole internet, with some help of Chrome. These 2 products allowed Google to track the majority of the internet traffic for the past 15 years.

At this point they have so many channels and side-channels, that i think they can comfortably let go of GA.

Re: Use of Google Analytics declared illegal by French data protection authority

#244

Post by jen20 »

can16358p wrote: post #151
marian_ivanco wrote: post #18

Earlier quoted context omitted.

I don't want to comment on GDPR, but you must be kidding with 'can just block'. Do you expect that average joe can do that ? It like saying, we don't need police you can simply defend your self.

Everything comes at a price. I don't expect every average Joe to be tech savvy to use extensions. Though when visiting a site (an action that a personal deliberately takes) if they really care about their privacy on web, cookies, GA tracking they aren't probably average Joe and can use a blocker.

You are conflating "technically savvy" and "doesn't want to be spied on". I understand that these probably correlate in your world, but a simple moment to think about why most people click "no" to the iOS tracking opt-in prompts explains that these are orthogonal issues.

Re: Use of Google Analytics declared illegal by French data protection authority

#245

Post by userbinator »

xtracto wrote: post #231
estaseuropano wrote: post #63

Earlier quoted context omitted.

No, you download chrome. You agree to the analytics when you install/first open it. This is different from going on the site of your local company and feeding data into Google analytics involuntarily. The relevant legislation is about whether or not you agree to data being collected and shared, and the issue is that US companies are essentially data funnels for NSA & co.

So why cant i ask my website users to AGREE on google analytics usage the first time they arrive? Its up to them to accept or not.

Haven't cookie consent prompts caused enough problems already...?

My way of disagreeing is GA domains in the HOSTS file.

Re: Use of Google Analytics declared illegal by French data protection authority

#246

Post by philistine »

jdrc wrote: post #200

While i think these rulings are interesting in the sense of providing an opening to EU-grown businesses (if not too late), it does have a comical dimension in it. "Private" information is everywhere, it's in your DNS queries, which also gets propagated to servers in the evil US empire. Are we going to legislate DNS out of existence too? The EU seems to like having a completely private internet, but that's not gonna b…

DNS is not forced to leak private information forever. There are ways to dissociate the request from the person making it.

Re: Use of Google Analytics declared illegal by French data protection authority

#247

Post by anthk »

jdrc wrote: post #200

While i think these rulings are interesting in the sense of providing an opening to EU-grown businesses (if not too late), it does have a comical dimension in it. "Private" information is everywhere, it's in your DNS queries, which also gets propagated to servers in the evil US empire. Are we going to legislate DNS out of existence too? The EU seems to like having a completely private internet, but that's not gonna b…

In Spain the Agencia Española de Protección de Datos (no translation needed I guess) is no joke.

Re: Use of Google Analytics declared illegal by French data protection authority

#248

Post by Dave3of5 »

iamacyborg wrote: post #226
Dave3of5 wrote: post #209

Earlier quoted context omitted.

Is that the case for any data that is passed into the USA then rather than just GA? So if I hosted my servers in any of the AWS US regions that too would be illegal if they have any personal data in them. In this case personal data is a randomised unique id. So say I have a table of users and all I have is a username and a password and a unique id for the record that's personal data and the customer is not allowed to…

Potentially, yes, though this hasn't been tested in court yet.

Wouldn't that cut off a vast swath of the internet from France though ? Some of the main big providers of internet services use US based data centres. I'm meaning:

* Amazon

* Google

* Facebook

* Netflix

* Microsoft

* Twitter

* Uber

I mean the list goes on but these are a really big part of the internet.

Re: Use of Google Analytics declared illegal by French data protection authority

#249

Post by einpoklum »

jdrc wrote: post #200

While i think these rulings are interesting in the sense of providing an opening to EU-grown businesses (if not too late), it does have a comical dimension in it. "Private" information is everywhere, it's in your DNS queries, which also gets propagated to servers in the evil US empire. Are we going to legislate DNS out of existence too? The EU seems to like having a completely private internet, but that's not gonna b…

> "Private" information is everywhere

This was the case before da interwebz as well: Your attending physician/doctor, your local grocery store, your local post office, your employer, your school - they all have a bunch of your private information, and should really not propagate it to the evil US empire, or anywhere for that matter.

> Are we going to legislate DNS out of existence too?

Apparently we haven't legislated straw men out of existence, as you seem to be using one very publicly.

Re: Use of Google Analytics declared illegal by French data protection authority

#250

Post by XCSme »

viro wrote: post #208
XCSme wrote: post #197

Earlier quoted context omitted.

Isn't it? Isn't the problem that the data is sent to a third-party service outside EU (in the US) that doesn't offer the same data-protection rules as EU?

nope, it's that the legal entity is required to honor US warrants. EU wants full control over that process.

I don't get your point, are you saying that the solution as webmaster is NOT to use a self-hosted solution, but to just sit and blame the EU/US legislation?
Post reply on HN