Live data from Hacker News

Use of Google Analytics declared illegal by French data protection authority

cnil.fr

991–1000 of 1001 posts

Re: Use of Google Analytics declared illegal by French data protection authority

#992

Earlier quoted context omitted.

Depends on your perspective. It might be that American/Chinese predatory service providers are instead locked out of the European market, allowing the breathing space for local solutions to flourish.

If your local providers need the rest of the world to be kneecapped in order to compete, you may want to start with that problem. The EU consumer will end up with strictly worse solutions and all the rest of the world will “gain” will be the crappy trade-barrier-supported Euro versions of Google and Facebook.

This is a short term view. There's a certain amount of 'activation energy' that a system needs to be able to kick off and become self sustaining. If a giant generalized, subsidized solution already exists PHBs are much happier to spend years trying to knock a round peg into a square hole than take the risk of doing something bespoke for the problem at hand.

Re: Use of Google Analytics declared illegal by French data protection authority

#993

Earlier quoted context omitted.

No, the subsidiary would be governed by European law, and would be prohibited from handing data over to either the US parent company or the US DOJ if that violated GDPR. The US parent company could not compel the subsidiary to violate the law of the region it was located in.

Yes, I suppose you're right, at least so long as they actually host their data in the EU. But what happens when senior data scientists at Google want to do some analysis? Each dataset for each global region can't remain fractured from each other. The subsidiary may not have to hand it over to the US government but does the GDPR prevent data from leaving the EU zone? If not, then local copies in the US would be expose…

You're making the mistake of assuming that "something can't happen" if it is inconvenient for the business. The convenience of the business is irrelevant - it must operate within the law.

And yes, GDPR prevents data from leaving the EU zone if there is then a possibility that GDPR could be violated. That's the crux of the recent court cases in Austria and France. You may not collect GDPR protected data if as a consequence of that collection there is a reasonable prospect GDPR will eventually be violated by ANYONE.

For your example case, all initial data processing would have to physically occur within Europe, performed by a subsidiary not subject to US law, and only after they had reduced it to aggregate data that could not be reverse engineered to get GDPR protected data would they be permitted to export it to America.

Re: Use of Google Analytics declared illegal by French data protection authority

#994

Earlier quoted context omitted.

On the contrary, it only forces those providers to have a European presence. We're not fragmenting the internet by looking after our own interests. This wouldn't be an issue if Americans viewed rights (and in this case privacy rights) as belonging to human being as opposed to Americans citizens. The US's policy is what led to this: > Agencies shall, to the extent consistent with applicable law, ensure that their priv…

You are absolutely fragmenting the internet. We had PII on Azure. We wanted to do business in France. We had to fork our services, and run a full stack on a crappy provider in France. They charged a lot more, would take weeks of vacation with zero support for us. It was a freaking nightmare. EDIT: I love the responses I'm getting. People are in absolute denial that this does in fact fragment the internet. You may bel…

company stooge.

Re: Use of Google Analytics declared illegal by French data protection authority

#995
post #48

Earlier quoted context omitted.

> Rest is just making life of web developers/admins/tech company owners harder. Seriously? People spend tons money and time to track users. If you want to be GDPR-compliant, simply don't save unnecessary userdata and if you still feel the urge to do so, give users the option to control it. It's that easy. Any problems you get from it are of your own making. > Especially with these European intentions I frankly believ…

GDPR is not merely a list of bad things not to do. You aren’t compliant unless you follow slow, expensive processes to continually demonstrate compliance.

I'd really love to see a quote on the section you're referring to. The GPDR has some processes for larger companies (i.e. DPOs), but they're neither expensive nor slow, and small companies have a lot more leeway.

Re: Use of Google Analytics declared illegal by French data protection authority

#996
post #146

Earlier quoted context omitted.

Government surveillance on citizens has a long history of horrifying consequences, especially in Germany. What is the worst corporations are doing with our data? Better ads?!

> What is the worst corporations are doing with our data? Better ads?! There is often no clear dividing line between government and corporations. You give one freedom to abuse privacy and it will be used by the other.

especially not in systems in which the goverment turns totalitarian. (see, fascism and while stalinism doens't have the concept of a company, many of its state owned enterprises where former companies).

Re: Use of Google Analytics declared illegal by French data protection authority

#997

I think we (in the EU) will soon realise the bizarre consequences of these regulations. European startups will not be able to use standard SaaS or PaaS tools (like AWS, Azure, Mailchimp, PayPal etc) if they are based in the US (like most of them are). No cloud services, no Office 365 or Google Workspace. It will take forever to build up a similar ecosystem in Europe and I think most successful European entrepreneurs…

I wouldn’t worry too much about AWS or Azure. When AWS realised how much money the European Public Sector spends on the public cloud a good few years back they went from being behind Azure in terms of complaisance to now being ahead. I’m Danish and as we’re a notorious Microsoft country I have the most experience with everything Azure, but the fact that Amazon was so quick to ensure that 100% of the workers who ever…

> but the fact that Amazon was so quick to ensure that 100% of the workers who ever come near the services they sell within the EU are EU citizens

Uh not sure what you're referring to but that's not true. The only airgapped region w/ enforced citizenship was for US citizens in GovCloud.

Re: Use of Google Analytics declared illegal by French data protection authority

#999

Earlier quoted context omitted.

GDPR is not merely a list of bad things not to do. You aren’t compliant unless you follow slow, expensive processes to continually demonstrate compliance.

I'd really love to see a quote on the section you're referring to. The GPDR has some processes for larger companies (i.e. DPOs), but they're neither expensive nor slow, and small companies have a lot more leeway.

The most egregious I know of is https://gdpr-info.eu/art-36-gdpr/, which calls for an 8–14 week delay that may or may not apply to any launch. I don’t even think the entire EU must agree on what the conditions will be.

Apart from “a natural person in the course of a purely personal or household activity” I don’t know of any size exemptions.

Re: Use of Google Analytics declared illegal by French data protection authority

#1000
post #784

Earlier quoted context omitted.

You are absolutely fragmenting the internet. We had PII on Azure. We wanted to do business in France. We had to fork our services, and run a full stack on a crappy provider in France. They charged a lot more, would take weeks of vacation with zero support for us. It was a freaking nightmare. EDIT: I love the responses I'm getting. People are in absolute denial that this does in fact fragment the internet. You may bel…

désolé!

Je suis un homme occupé, et te faire passer pour une risée peut prendre du temps, mais tout le monde a besoin d'un passe-temps.
Post reply on HN