wp-plugin-hostgator
domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init
action or later. Please see Debugging in WordPress for more information. (This message was added in version 6.7.0.) in /home4/scienrds/scienceandnerds/wp-includes/functions.php on line 6114ol-scrapes
domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init
action or later. Please see Debugging in WordPress for more information. (This message was added in version 6.7.0.) in /home4/scienrds/scienceandnerds/wp-includes/functions.php on line 6114Source:https:\/\/techcrunch.com\/2023\/07\/03\/google-analytics-sweden-gdpr-fines\/<\/a><\/br> Sweden\u2019s data protection watchdog has issued a couple of fines in relation to exports of European users\u2019 data via Google Analytics which it found breach the bloc\u2019s privacy rulebook owing to risks posed by U.S. government surveillance. It has also warned other companies against use of Google\u2019s tool.<\/p>\n The fines \u2014 just over $1.1 million for Swedish telco Tele2 and less than $30,000 for local online retailer CDON \u2014 are notable as they are the first such fines following a raft of strategic privacy complaints targeting Google Analytics (and Facebook Connect) back in August 2020<\/a>.<\/p>\n The regulator found that so-called supplementary measures applied by Google to European users\u2019 data sent to the U.S. for processing were insufficient to raise the level of protection to the required legal standard. Including Google\u2019s use of IP address truncation (an anonymization measure) as, in the Tele2 case, it said the company did not clarify whether the truncation was performed before or after the transfer of the data to the U.S. so had failed to demonstrate there is \u201cno potential access to the entire IP address before the last octet is truncated\u201d.<\/span><\/p>\n The watchdog also found breaches of the bloc\u2019s General Data Protection Regulation (GDPR) rules on transfers to third countries in the case of two other companies\u2019 use of Google Analytics, Coop and Dagens Industries, but did not issue fines in those cases.<\/p>\n \u201cIn its audits, IMY [the Swedish DPA] considers that the data transferred to the U.S. via Google\u2019s statistics tool is personal data because the data can be linked with other unique data that is transferred. The authority also concludes that the technical security measures that the companies have taken are not sufficient to ensure a level of protection that essentially corresponds to that guaranteed within the EU\/EEA,\u201d the regulator wrote in a statement<\/a>.<\/p>\n \u201cAll four companies have based their decisions on the transfer of personal data via Google Analytics on standard contractual clauses. From IMY\u2019s audits, it appears that none of the companies\u2019 additional technical security measures are sufficient. IMY issues an administrative fine of 12 million SEK against Tele2 and 300,000 SEK against CDON, which has not taken the same extensive protective measures as Coop and Dagens Industri. Tele2 has recently stopped using the statistics tool on its own initiative. IMY orders the other three companies to stop using the tool.\u201d<\/p>\n In the blog post \u2014 which is entitled \u201cCompanies must stop using Google Analytics\u201d \u2014 the regulator added that the four decisions should be treated as guidance,\u00a0 emphasizing what it couched as wider implications.<\/p>\n Last year a number of European Union DPAs, including the French<\/a> and Italian<\/a>\u00a0watchdogs, warned against use of Google\u2019s analytics tool after finding a number of users to be non-compliant with the bloc\u2019s rules on international data transfers. However other regulators have not issued financial sanctions, according to NGO noyb, which was behind the original complaints \u2014 seemingly favoring a softer approach to enforcing the GDPR on users of such a familiar tool despite the same data transfer issue underlying them all.<\/p>\n noyb\u2019s original 101 strategic complaints targeted a variety of websites around Europe using Google Analytics or similar Facebook services in the wake of a landmark ruling by the Court of Justice of the European Union in July 2020<\/a> which invalidated an EU-U.S. data transfer deal called Privacy Shield just a few years after striking down its predecessor, Safe Harbor.<\/p>\n The EU and U.S. are in the process of finalizing a third data transfer arrangement, called the EU-U.S. Data Privacy Framework<\/a>, which is expected to be completed later this month \u2014 and will, in the short term at least, lift the legal uncertainty that\u2019s been clouding EU-U.S. data transfers since the CJEU strike downs.<\/p>\n
\nStop using Google Analytics, warns Sweden\u2019s privacy watchdog, as it issues over $1M in fines<\/br>
\n2023-07-03 21:40:08<\/br><\/p>\n