Data Privacy Hub

Following the recent determination by the Austrian data protection authority (DPA) that the continuous use of Google Analytics violates the GDPR, the French data protection authority, or the Commission nationale de l’informatique et des libertés (CNIL) reached a similar conclusion just weeks later. In its decision, the CNIL has found that the specific violation breaches Article 44 of the GDPR, which covers personal data transfers, stating that transfers to the United States “are currently not sufficiently regulated.” These findings only highlight the absence of an EU-US agreement on the matter and the risks of US business in Europe.

The complete decision can be found here.