Live data from Hacker News

Use of Google Analytics declared illegal by French data protection authority

cnil.fr

361–370 of 1001 posts

Re: Use of Google Analytics declared illegal by French data protection authority

#361
post #56

Earlier quoted context omitted.

Who's concerned about Google collecting data? No.

So we should accept facial recognition in public because there are people who don't care?

Should we allow it just because there is a vocal minority really bothered by it?

Re: Use of Google Analytics declared illegal by French data protection authority

#362

Earlier quoted context omitted.

>Yes, and when you go shopping and pay with cash in a store with no surveillance, your shopping habits are being shared against your wishes with a random third party (the external company bookkeeper). How, you don't enter your name when you pay with cash. Also in EU is illegal to share any personal info in physical world too, say you go and make a subscription to a gym they can't share your data with a third party un…

On the other hand, it's perfectly legal (and usual practice) to contract out the operation of people counting devices that just tally up how many persons go through a door. (By the way, a gym can and usually does share contract data including personal information with numerous third-parties such as external bookkeepers. This is legal under the GDPR without explicit consent.)

>By the way, a gym can and usually does share contract data with numerous third-parties such as external bookkeepers. This is perfectly legal under the GDPR)

Why is it legal, does the gym need those 100 contractors to know my data for it to work? What are those for 100 different accountants? How did gyms or other businesses worked before the internet, did a guy walked to 100 different locations with papers in hand so those "partners" take a quick look?

Re: Use of Google Analytics declared illegal by French data protection authority

#363

Earlier quoted context omitted.

Who's concerned about Google collecting data? No.

Surely that is to do with her knowledge and education around privacy and data collection. Ignorance to the issue doesn’t mean we should ignore people like this.

I am perfectly educated about privacy and data collection and I completely fail to see the actual harm being done. I am much more bothered by those incessant cookie dialogs.

Re: Use of Google Analytics declared illegal by French data protection authority

#364

Earlier quoted context omitted.

Yes, and when you go shopping and pay with cash in a store with no surveillance, your shopping habits are being shared against your wishes with a random third party (the external company bookkeeper). It's disingenuous to have problems with websites collecting entirely anonymous browsing data -- that goes beyond any arguments for privacy and just steers into "yelling at clouds" territory.

> shopping habits I think you are wrong. What they receive is a set of purchases in a given period of time that allow them to make many important decisions (when people buy most, what purchases are more likely on a given date etc.) but there is no way of finding out my shopping habits.

no - the analysis is done on receipts, not just total products sold. They don't care what you bought, they care to know that people who buy diapers also buy wipes, and people who buy soy milk don't buy butter, etc. The analysis of anonymous receipts still yields very interesting and actionable results in aggregate. Your privacy has nothing to do with how a company analyzes its sales data as long as they don't include your identity and drill down into analyzing your receipt alone.

Re: Use of Google Analytics declared illegal by French data protection authority

#365

Earlier quoted context omitted.

Yes, and when you go shopping and pay with cash in a store with no surveillance, your shopping habits are being shared against your wishes with a random third party (the external company bookkeeper). It's disingenuous to have problems with websites collecting entirely anonymous browsing data -- that goes beyond any arguments for privacy and just steers into "yelling at clouds" territory.

>Yes, and when you go shopping and pay with cash in a store with no surveillance, your shopping habits are being shared against your wishes with a random third party (the external company bookkeeper). How, you don't enter your name when you pay with cash. Also in EU is illegal to share any personal info in physical world too, say you go and make a subscription to a gym they can't share your data with a third party un…

> How, you don't enter your name when you pay with cache.

You don't need to be identified by name, just by a "fingerprint". If you go there regularly you will be identified by your "fingerprint".

"Oh, it's that one privacy nut again who always wears sunglasses and a hoodie and only pays in cash"

Re: Use of Google Analytics declared illegal by French data protection authority

#366

Earlier quoted context omitted.

Potentially, yes, though this hasn't been tested in court yet.

Wouldn't that cut off a vast swath of the internet from France though ? Some of the main big providers of internet services use US based data centres. I'm meaning: * Amazon * Google * Facebook * Netflix * Microsoft * Twitter * Uber I mean the list goes on but these are a really big part of the internet.

The differentiation is probably, that some data is required for offering a service, that people choose to use, but GA data is not.

Re: Use of Google Analytics declared illegal by French data protection authority

#367
post #344

Earlier quoted context omitted.

Indeed, a French website which keeps private information about its users must not - ethically, morally - use US services which are accessible to US intelligence agencies. That is irrespective of any legislation or court rulings, it's just common sense.

I wonder who are people more afraid of exposing their private information to: the USA or their own government.

The USA, of course. Don't forget you vote for your government, not for Google's CEO.

Re: Use of Google Analytics declared illegal by French data protection authority

#368

Earlier quoted context omitted.

You're within your rights to create and offer whatever kind of service you want. As an end-user, however, any data what-so-ever sent to a 3rd party without my knowledge or consent is too much. There is no such thing as "the right amount." I'm OK with websites using self-hosted tools such as Matomo as long as the data never leaves their servers. Analytics is important to any business. But I choose to do business with…

>as long as the data never leaves their servers This is kind of ridiculous in the cloud era, isn't it? The analogy with external accountant up this thread is a good one. It's not about where data are processed, it's about how it's used.

No, it's not. Using Matomo on my own servers has nothing to do with the way GA etc. operates - it's an equivalent of going through my own Nginx logs and parsing them to generate diagrams and so on. Of course if I share personally identifiable data with a third party, it's a completely different thing - in this case it does not matter if it comes from Matomo or web server logs.

But I agree with your conclusion: what matters is how it's being used. In this case - whether you share/sell it to others or not.*

[*] But not only: it also matters if you take adequate care in protecting personally identifiable information or not.

Re: Use of Google Analytics declared illegal by French data protection authority

#369

Is anyone using an alternative that provides some basic analytics and isn't likely to get me in legal hot water in the future? I've already offloaded Google Fonts due to the German ruling. I'm happy to self-host piwik if needed, but could that fall foul of regulators?

> I've already offloaded Google Fonts due to the German ruling. I'm happy to self-host piwik if needed, but could that fall foul of regulators? Well... if you self-host Piwik or Matomo, you're relatively safe and you can avoid a lot of the bureaucracy bullshit that you'd have with external services. However, check with a lawyer before setting it up, and definitely get user consent for detailed tracking. There are bas…

Interesting that you mention localStorage.

If the web-page's javascript ONLY stores and processes data stored in the client's localStorage to generate the local page, and sends nothing back to the server, so the web-site operator never sees that data, then is the web-site operator processing that data, or is it only the user-agent's operator ?

The web-site operator certainly wouldn't be a "data controller" since it isn't collecting or storing the data. And it's hard to see how the web-site operator would be a "data processor" in that circumstance.

Re: Use of Google Analytics declared illegal by French data protection authority

#370

Is anyone using an alternative that provides some basic analytics and isn't likely to get me in legal hot water in the future? I've already offloaded Google Fonts due to the German ruling. I'm happy to self-host piwik if needed, but could that fall foul of regulators?

> I've already offloaded Google Fonts due to the German ruling. I'm happy to self-host piwik if needed, but could that fall foul of regulators? Well... if you self-host Piwik or Matomo, you're relatively safe and you can avoid a lot of the bureaucracy bullshit that you'd have with external services. However, check with a lawyer before setting it up, and definitely get user consent for detailed tracking. There are bas…

[deleted]
Post reply on HN