Live data from Hacker News

Use of Google Analytics declared illegal by French data protection authority

cnil.fr

431–440 of 1001 posts

Re: Use of Google Analytics declared illegal by French data protection authority

#431

For who needs a summary of what is happening in the EU [1] 1. Since 2020, it's illegal to send personal data to the US because of the invalidation of the Privacy Shield [2] 2. Google said it was okay in the EU to use anonymized IP addresses 3. The Austrian Data Protection Authority (DSB) [3] ruled differently and waived most of the arguments raised by Google. The DSB ruled that even anonymized IP addresses are person…

> The Austrian Data Protection Authority (DSB) [3] ruled differently and waived most of the arguments raised by Google. The DSB ruled that even anonymized IP addresses are personal data.

Why are anonymised IP addresses still considered "Personal Data"? Is it because Google is doing the anonymisation?

Re: Use of Google Analytics declared illegal by French data protection authority

#433

I think we (in the EU) will soon realise the bizarre consequences of these regulations. European startups will not be able to use standard SaaS or PaaS tools (like AWS, Azure, Mailchimp, PayPal etc) if they are based in the US (like most of them are). No cloud services, no Office 365 or Google Workspace. It will take forever to build up a similar ecosystem in Europe and I think most successful European entrepreneurs…

That’s okay.

The EU can build it itself when the US player are not able to not send data to their US data centres.

Re: Use of Google Analytics declared illegal by French data protection authority

#434

Earlier quoted context omitted.

Doesn't matter one single bit, they are still the 100% subsidiary of Alphabet which is legally bound to provide data at the request of US gov agencies.

Microsoft has seen this one - they have a subsidiary in the EU that holds the EU data. Yes, the US-based parent company is legally bound to provide the data at the request of the US gov agencies. However, the only way that they can get hold of that data is to ask the EU subsidiary nicely. The EU subsidiary is legally bound to not hand that data over.

[deleted]

Re: Use of Google Analytics declared illegal by French data protection authority

#435

Taking this to the logical extreme: A French website can not use any American service, right? Because any American services "are not sufficient to exclude the accessibility of this data for US intelligence services".

We're quickly getting there.

For instance, any service that handles health data absolutely cannot have the data be accessible in a way, shape or form by american-owned entities, for any reason.

It's not hard to imagine that, as time goes on, these same limitations will be expanded to other types of decreasingly sensitive data.

And honestly, that's perfectly reasonable. The US government gives itself the right to systematically spy on everything going through US cloud companies. Precedent has shown it can and will use that data against the interests of its supposed allies, even for industrial espionage.

If the US says "every US company must give over european data to the government", then at some point europeans have to say "US companies can't have european data".

Re: Use of Google Analytics declared illegal by French data protection authority

#436

If someone adds http://blah.us "> to their website, and that image is hosted in the United States, how does that not also violate French data protection? The user's browser makes a request to a US server, including the user's IP address. I legit do not understand how to make French people happy with these laws.

By not embedding third party content on your site.

Re: Use of Google Analytics declared illegal by French data protection authority

#437
post #77

Note that Wikimedia has been not using Google Analytics since forever because they're concerned about precisely the same privacy problems as the regulators. This other post has more comments: https://news.ycombinator.com/item?id=30284820 I love that the plaintiff in this case is the "NOYB Association", as in None Of Your Fucking Business, Google.

You might know that already, but NOBY indeed stands for "None of Your Business"( https://noyb.eu/en ). The organisation has been involved in nearly all of the last privacy related rulings in the EU and is a real blessing for consumer rights.

And a note that you can donate to them, and I have done so for nearly four years.

Re: Use of Google Analytics declared illegal by French data protection authority

#438

I think we (in the EU) will soon realise the bizarre consequences of these regulations. European startups will not be able to use standard SaaS or PaaS tools (like AWS, Azure, Mailchimp, PayPal etc) if they are based in the US (like most of them are). No cloud services, no Office 365 or Google Workspace. It will take forever to build up a similar ecosystem in Europe and I think most successful European entrepreneurs…

Europe's future internet without web3 sounds wonderful.

Re: Use of Google Analytics declared illegal by French data protection authority

#439

I think we (in the EU) will soon realise the bizarre consequences of these regulations. European startups will not be able to use standard SaaS or PaaS tools (like AWS, Azure, Mailchimp, PayPal etc) if they are based in the US (like most of them are). No cloud services, no Office 365 or Google Workspace. It will take forever to build up a similar ecosystem in Europe and I think most successful European entrepreneurs…

> No cloud services, no Office 365 or Google Workspace I'm so looking forward to that.

What is the alternative? We are going to go back to 2005 where we send docs over email? Files end up being too large, nobody knows what the latest copy is, etc.

Re: Use of Google Analytics declared illegal by French data protection authority

#440

I think we (in the EU) will soon realise the bizarre consequences of these regulations. European startups will not be able to use standard SaaS or PaaS tools (like AWS, Azure, Mailchimp, PayPal etc) if they are based in the US (like most of them are). No cloud services, no Office 365 or Google Workspace. It will take forever to build up a similar ecosystem in Europe and I think most successful European entrepreneurs…

>I think we (in the EU) will soon realise the bizarre consequences of these regulations.

Could this not also be said about US regulations such as CLOUD act, Section 702 of the Foreign Intelligence Surveillance Act and Executive Order 12333.

I don't think it's accurate to solely blame the EU when this is in response to legislation that gives/gave the US access to all types of personal data on European citizens.

Post reply on HN