Live data from Hacker News

Use of Google Analytics declared illegal by French data protection authority

cnil.fr

921–930 of 1001 posts

Re: Use of Google Analytics declared illegal by French data protection authority

#921
post #802

Earlier quoted context omitted.

There are AWS and Azure regions in France. GCP should open one early 2022.

But they don't count because they're still controlled from the USA.

AWS most certainly isn't for as far as the data protection is concerned. An EU entity runs the EU regions of AWS cloud, you enter a contract with that entity and _not_ with the parent and the data is under the EU law.

Re: Use of Google Analytics declared illegal by French data protection authority

#922

Earlier quoted context omitted.

On the contrary, it only forces those providers to have a European presence. We're not fragmenting the internet by looking after our own interests. This wouldn't be an issue if Americans viewed rights (and in this case privacy rights) as belonging to human being as opposed to Americans citizens. The US's policy is what led to this: > Agencies shall, to the extent consistent with applicable law, ensure that their priv…

You are absolutely fragmenting the internet. We had PII on Azure. We wanted to do business in France. We had to fork our services, and run a full stack on a crappy provider in France. They charged a lot more, would take weeks of vacation with zero support for us. It was a freaking nightmare. EDIT: I love the responses I'm getting. People are in absolute denial that this does in fact fragment the internet. You may bel…

I feel your pain but as an argument in this discussion it doesn't work. Your problem was in 2014 and Azure works just fine now.

It took some doing which was the whole point. The local provider even got a chance to match the offer.

Re: Use of Google Analytics declared illegal by French data protection authority

#923

Earlier quoted context omitted.

The big companies buy the little companies as soon as they look like they may be a threat. It’s not monumental or hard to compete with them.

I think you are underestimating the effort required to produce an suite of office products. Libre office is a third option, but does it have much usage? Why or why not? Could you sustain a development team capable of creating this with a limited market and revenue stream?

> Could you sustain a development team capable of creating this with a limited market and revenue stream?

Market wouldn't be limited and potential revenue streams would be huge. So yeah. Just as a reminder, this is still assuming that there is a significant window where the big options aren't available for Europeans.

Re: Use of Google Analytics declared illegal by French data protection authority

#924
post #699

Earlier quoted context omitted.

This completely misses the point, the laws shouldn't be written to accommodate businesses, its the other way around. If fragmenting is a consequence of better privacy laws, so be it.

Laws should be written to facilitate and improve the growth of civilization. This includes practical and fair measures for conducting business. Imposing byzantine regulations on every webmaster on the planet isn't helping anyone, least of all the European user, who will increasingly be locked out from the rest of the planet.

Depends on your perspective. It might be that American/Chinese predatory service providers are instead locked out of the European market, allowing the breathing space for local solutions to flourish.

Re: Use of Google Analytics declared illegal by French data protection authority

#925

Earlier quoted context omitted.

Quick question: was there a reason you could not use Azure’s region support? https://azure.microsoft.com/en-us/global-infrastructure/geog... Or was it before Azure had that? Looks like they’ve had it for awhile, at least back to 2009 or 2010.

France, Year Opened 2018, is what I see on that page. This was impacting us in 2014 to 2016, as I remember.

Looks to me like the regulations did exactly what they were designed to do, and Azure implemented support for the EU market. The goal of these regulations is not to make things harder for companies trying to publish products in different regions, the goal is to get the big platforms (AWS, Azure, GCP) to implement systems that are in line with EU privacy requirements.

I'm sorry your business was impacted during the period where the regulations came into effect and the big platforms did not have compliant services ready. It would have been better if the negative externalities of these regulations would be entirely carried by the big platforms who are responsible for consumer privacy in the first place.

Re: Use of Google Analytics declared illegal by French data protection authority

#926
post #881

Earlier quoted context omitted.

So your argument is out of date and no longer valid.

Right. All I have to do is to stand up two complete copies of my full stack, and support both of them. There's no way that adds extra burden to me. My argument is completely invalid. Thanks for explaining that to me.

If you want to sell in two different countries don’t you have to comply with two different legal codes and support both of them?

Re: Use of Google Analytics declared illegal by French data protection authority

#927

Earlier quoted context omitted.

On the contrary, it only forces those providers to have a European presence. We're not fragmenting the internet by looking after our own interests. This wouldn't be an issue if Americans viewed rights (and in this case privacy rights) as belonging to human being as opposed to Americans citizens. The US's policy is what led to this: > Agencies shall, to the extent consistent with applicable law, ensure that their priv…

> On the contrary, it only forces those providers to have a European presence. All the big cloud providers have presences in Europe. What am I missing here?

Nothing, this is now a solved problem. The EU didn't want the entire internet being hosted from the US. They designed policies to force hosting within EU countries. It happened.

The only people still moaning are Americans and hold-outs like Google refusing to move data.

Re: Use of Google Analytics declared illegal by French data protection authority

#928

I think we (in the EU) will soon realise the bizarre consequences of these regulations. European startups will not be able to use standard SaaS or PaaS tools (like AWS, Azure, Mailchimp, PayPal etc) if they are based in the US (like most of them are). No cloud services, no Office 365 or Google Workspace. It will take forever to build up a similar ecosystem in Europe and I think most successful European entrepreneurs…

> we fragment and destroy the entire Internet I would call fragmenting these things rebuilding the internet. Not sure how consolidating everyone on a few Mailchimp type services is in anyone's interest.

Perhaps unpopular opinion, but I don't want a fragmented internet, where I have to remember 10 different options for every single service I need to run a startup. Is that really the hill we want to die on?

I have enough things to worry about, I don't want to consider 10 different cloud computing options, 10 different database options, 10 different analytics services. I want to just go with the big popular option.

Heck I'm willing to bet even if more options come up, the most popular option will be some aggregator site that tells you which one to use.

Re: Use of Google Analytics declared illegal by French data protection authority

#929
post #687

Earlier quoted context omitted.

This is a totally different question, in this case what matters is that Google can be compelled to release the full IP address by US intelligence agencies.

So it's an easy fix for Google - change GA to only save those anonymized IPs

Not quite. Google still has access to those IPs when it receives the request from the browser and could be compelled to store them by US intelligence. Thus data are being transferred to a party that can not adequately protect them. So in this case, as I understand it, the solution would have to be something more elaborate, like proxying the analytics requests through the server to strip the original IP address. Which I presume Google isn't very eager to allow.

Re: Use of Google Analytics declared illegal by French data protection authority

#930

Earlier quoted context omitted.

You are building up a whole strawman here. This is all about sending personal data to a machine in the US, owned by a company, which falls under US law. You don't have to send that personal data to the US, do you? Why would you do such a thing in the first place? Surely informed people would not simply consent to such a practice. And I mean informed. Not just clicking "OK OK next OK" without knowing what actually goe…

It's not a strawman, it was the company I worked for. We helped manufacture medical devices. We sold a device that took medical images, and then sent the images to a server. The server would do tons of processing on the images, and help manufacture a medical device custom to the patient. We ran our servers in the United States. We could not sell our product in France, until we stood up servers in France to store and…

It is kind of a strange idea in the first place, to store medical data outside the country, in a country like the US. I don't know if any country with good data protection laws would allow such a thing. I find the idea, that this could be OK for patients to be weird. I surely wouldn't want my medical data put onto US servers, likely without even knowing, because the hospital stuff does not know themselves and not telling me either. Maybe even worse being put to the choice of having some equipment used on me, which automatically shares that data to the US.

At some point in your project there seems to have been a time, when such basic questions of consent were overlooked and later you paid the price. Your intentions may have been nothing but good, but I for one am glad, that such practice was not allowed to happen.

Post reply on HN