{"id":19944,"date":"2022-01-24T08:00:00","date_gmt":"2022-01-24T16:00:00","guid":{"rendered":"https:\/\/www.privateinternetaccess.com\/blog\/?p=19944"},"modified":"2022-01-25T10:49:00","modified_gmt":"2022-01-25T10:49:00","slug":"bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again","status":"publish","type":"post","link":"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/","title":{"rendered":"Bombshell Decision That Use of Google Analytics in Austria Violates Top EU Court\u2019s Ruling Boosts GDPR Impact Again"},"content":{"rendered":"<p>The GDPR is finally beginning to make itself felt more strongly, as a series of <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/the-tiny-nation-of-luxembourg-slaps-amazon-with-the-biggest-gdpr-fine-yet-nearly-900-million\/\">blog<\/a> <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/belgium-gdpr-superpower-about-to-rule-leading-ad-tracking-framework-is-illegal\/\">posts<\/a> have <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/good-news-for-gdpr-enforcement-against-cookie-walls-but-also-a-dangerous-legal-challenge-from-whatsapp\/\">noted<\/a>. The situation is <a href=\"https:\/\/www.dlapiper.com\/en-gb\/insights\/publications\/2022\/1\/dla-piper-gdpr-fines-and-data-breach-survey-2022\/\" target=\"_blank\" rel=\"noopener\">summed up<\/a> in a new \u201cDLA Piper GDPR fines and data breach survey\u201d. Compared with the previous year, total GDPR fines have increased from $179 million to $1.2 billion. But as the report rightly notes, in terms of broader impact, the 2020 ruling from the Court of Justice of the European Union (CJEU) that the <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/top-eu-court-sinks-main-framework-for-sending-personal-data-across-the-atlantic\/\">Privacy Shield framework<\/a> for transferring personal data across the Atlantic, was invalid, is still the one to watch.<\/p>\n<p>Given the continuing importance of transatlantic data transfers, it\u2019s not surprising that the <a href=\"https:\/\/www.edpb.europa.eu\/edpb_en\" target=\"_blank\" rel=\"noopener\">European Data Protection Board<\/a> (EDPB), which coordinates the application of the GDPR across the EU, has tried to clarify the current situation with a <a href=\"https:\/\/www.edpb.europa.eu\/system\/files\/2021-06\/edpb_recommendations_202001vo.2.0_supplementarymeasurestransferstools_en.pdf\" target=\"_blank\" rel=\"noopener\">series of recommendations for companies<\/a>. It\u2019s striking that the best it can come up with is \u201cyou must verify on a case-by-case basis whether (or not) the law or practice of the third country of destination undermines the safeguards\u201d of the GDPR, and whether \u201csupplementary measures may fill the gap\u201d. If you can\u2019t do that, well, \u201cyou must not start transferring personal data to the third country concerned on the basis of your chosen transfer tool\u201d. If that advice all seems a bit vague, the Austrian Data Protection Authority has kindly provided a practical demonstration of just how far-reaching it is in reality.<\/p>\n<p>In August 2020, the PIA blog reported that Max Schrems and his organization, noyb.eu, had filed no less than <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/max-schrems-files-101-complaints-across-30-european-countries-to-turbocharge-gdprs-impact-and-hes-not-the-only-one\/\">101 complaints across 30 countries<\/a>, alleging that companies were not complying with the new CJEU ruling on data transfers, and were thus in breach of the GDPR. The first of those 101 complaints has <a href=\"https:\/\/noyb.eu\/en\/austrian-dsb-eu-us-data-transfers-google-analytics-illegal\" target=\"_blank\" rel=\"noopener\">now been decided<\/a>:<\/p>\n<blockquote><p>In a groundbreaking decision, the Austrian Data Protection Authority (\u201cDatenschutzbeh\u00f6rde\u201d or \u201cDSB\u201d) has decided on a model case by noyb that the continuous use of Google Analytics violates the GDPR. This is the first decision on the 101 model complaints filed by noyb in the wake of the so-called \u201cSchrems II\u201d decision. In 2020, the Court of Justice (CJEU) decided that the use of US providers violates the GDPR, as US surveillance laws require US providers like Google or Facebook to provide personal details to US authorities.<\/p><\/blockquote>\n<p>The problem EU companies face is that certain key online service providers, like Google and Facebook, are subject to US laws that require them to hand over data to the US authorities if required. That would be a violation of the GDPR, and was the reason why the Privacy Shield framework was ruled invalid by the CJEU. To get around that problem, companies need \u201csupplementary measures\u201d, as the EDPB puts it in the guidance mentioned above. In its <a href=\"https:\/\/noyb.eu\/sites\/default\/files\/2021-05\/2021-04-09_Response_to_Austrian_DPA_-_NOYB_Complaints_b.pdf\" target=\"_blank\" rel=\"noopener\">submission to the Austrian Data Protection Authority<\/a>, Google argued that it took \u201crobust technical measures to safeguard personal data, and to protect against interception in transit.\u201d These turned out to be things like encrypting data as it moves around the Internet and between sites, as well as the use of \u201cfencing, signage and other measures\u201d to secure data centers. <a href=\"https:\/\/noyb.eu\/en\/austrian-dsb-eu-us-data-transfers-google-analytics-illegal\" target=\"_blank\" rel=\"noopener\">The Austrian authorities were unimpressed<\/a>: \u201cinsofar as the technical measures are concerned, it is also not recognizable (\u2026) to what extent [the measure] would actually prevent or limit access by U.S. intelligence agencies considering U.S. law.\u201d<\/p>\n<p>Although this is a ruling by the Austrian Data Protection Authority, the noyb.eu press release says: \u201cSimilar decisions are expected in other EU member states, as regulators have cooperated on these cases in an EDPB \u2018task force\u2019.\u201d The <a href=\"https:\/\/www.tellerreport.com\/tech\/2022-01-14-google-analytics-may-soon-no-longer-be-allowed-due-to-privacy-law.HyxIH3xyat.html\" target=\"_blank\" rel=\"noopener\">Dutch Data Protection Authority<\/a> is currently investigating the use of Google Analytics. The <a href=\"https:\/\/www.edps.europa.eu\/_en\" target=\"_blank\" rel=\"noopener\">European Data Protection Supervisor<\/a> (EDPS) has <a href=\"https:\/\/noyb.eu\/en\/edps-sanctions-parliament-over-eu-us-data-transfers-google-and-stripe\" target=\"_blank\" rel=\"noopener\">already taken a view<\/a>. His decision followed <a href=\"https:\/\/noyb.eu\/en\/data-transfers-us-and-insufficient-cookie-information-noyb-files-complaint-against-european\" target=\"_blank\" rel=\"noopener\">yet another complaint from Schrems<\/a>, this time about the European Parliament\u2019s COVID-19 testing website: \u201cThe EDPS highlights that the use of Google Analytics and the payment provider Stripe (both US companies) violated the Court of Justice\u2019s (CJEU) \u201cSchrems II\u201d ruling on EU-US data transfers.\u201d Schrems points out that the implications of the EDPS ruling are broad:<\/p>\n<blockquote><p>The EDPS made it clear that even the placement of a cookie by a US provider is violating EU privacy laws. No proper protections against US surveillance were in place, despite the fact that European politicians are a known target for surveillance.<\/p><\/blockquote>\n<p>Not every US provider will be affected by these rulings, only those large enough to be subject to the US government requests for personal data. Nonetheless, that will include <a href=\"https:\/\/noyb.eu\/en\/next-steps-eu-companies-faqs\" target=\"_blank\" rel=\"noopener\">all the digital giants<\/a>, such as Amazon (AWS), Apple, Cloudflare, Dropbox, Facebook, Google, and Microsoft.<\/p>\n<p>Clearly, the impact of these decisions, if confirmed across the EU by the other data protection authorities, will be considerable. One curiosity is that the Austrian and EDPS decisions do not call for Google to be fined \u2014 they are rulings against the EU bodies that sent personal data to the US. That seems to put the onus on complying with the GDPR on the users of these US services, rather than on the companies that supply the services. However, the Austrian Data Protection Authority has said that it will investigate Google further in order to establish whether it committed GDPR violations by providing personal data to the US government, so that aspect may still change. As for long-term solutions to the transatlantic data transfer problem, Schrems says there are only two: proper privacy protections in the US, or completely separate online services for the US and the EU.<\/p>\n<p>Featured image by <a href=\"https:\/\/commons.wikimedia.org\/wiki\/File:Wildsch%C3%B6nau_feiert_Neues_Jahr_06.jpg\" target=\"_blank\" rel=\"noopener\">Ximeg<\/a>. https:\/\/commons.wikimedia.org\/wiki\/File:Wildsch%C3%B6nau_feiert_Neues_Jahr_06.jpg CC BY-SA 3.0 https:\/\/creativecommons.org\/licenses\/by-sa\/3.0\/deed.en unmodified<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The GDPR is finally beginning to make itself felt more strongly, as a series of blog posts have noted. The situation is summed up in a new \u201cDLA Piper GDPR fines and data breach survey\u201d. Compared with the previous year, total GDPR fines have increased from $179 million to $1.2 billion. But as the report &hellip; <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Bombshell Decision That Use of Google Analytics in Austria Violates Top EU Court\u2019s Ruling Boosts GDPR Impact Again&#8221;<\/span><\/a><\/p>\n","protected":false},"author":20,"featured_media":19948,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_stopmodifiedupdate":false,"_modified_date":"","footnotes":""},"categories":[1,130,1940,1941],"tags":[879,544,2256,2475,104,485,74,1678,681,2250,612],"class_list":["post-19944","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-governments","category-social-media","category-surveillance","tag-austria","tag-cjeu","tag-edpb","tag-edps","tag-facebook","tag-gdpr","tag-google","tag-google-analytics","tag-max-schrems","tag-netherlands","tag-privacy-shield"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.9 (Yoast SEO v26.9) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Bombshell Decision That Use of Google Analytics in Austria Violates Top EU Court\u2019s Ruling Boosts GDPR Impact Again<\/title>\n<meta name=\"description\" content=\"The GDPR is finally beginning to make itself felt more strongly, as a series of blog posts have noted. The situation is summed up in a new &quot;DLA Piper GDPR google analytics\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Bombshell Decision That Use of Google Analytics in Austria Violates Top EU Court\u2019s Ruling Boosts GDPR Impact Again\" \/>\n<meta property=\"og:description\" content=\"The GDPR is finally beginning to make itself felt more strongly, as a series of blog posts have noted. The situation is summed up in a new &quot;DLA Piper GDPR google analytics\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/\" \/>\n<meta property=\"og:site_name\" content=\"PIA\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/privateinternetaccess\/\" \/>\n<meta property=\"article:published_time\" content=\"2022-01-24T16:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-01-25T10:49:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2022\/01\/1280px-Wildschonau_feiert_Neues_Jahr_06.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"807\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Glyn Moody\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@http:\/\/twitter.com\/glynmoody\" \/>\n<meta name=\"twitter:site\" content=\"@buyvpnservice\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Glyn Moody\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/\"},\"author\":{\"name\":\"Glyn Moody\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775\"},\"headline\":\"Bombshell Decision That Use of Google Analytics in Austria Violates Top EU Court\u2019s Ruling Boosts GDPR Impact Again\",\"datePublished\":\"2022-01-24T16:00:00+00:00\",\"dateModified\":\"2022-01-25T10:49:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/\"},\"wordCount\":947,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2022\/01\/1280px-Wildschonau_feiert_Neues_Jahr_06.jpg\",\"keywords\":[\"austria\",\"cjeu\",\"edpb\",\"edps\",\"Facebook\",\"gdpr\",\"google\",\"google analytics\",\"max schrems\",\"netherlands\",\"Privacy Shield\"],\"articleSection\":[\"General Privacy News\",\"Governments\",\"Social Media\",\"Surveillance\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/\",\"name\":\"Bombshell Decision That Use of Google Analytics in Austria Violates Top EU Court\u2019s Ruling Boosts GDPR Impact Again\",\"isPartOf\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2022\/01\/1280px-Wildschonau_feiert_Neues_Jahr_06.jpg\",\"datePublished\":\"2022-01-24T16:00:00+00:00\",\"dateModified\":\"2022-01-25T10:49:00+00:00\",\"description\":\"The GDPR is finally beginning to make itself felt more strongly, as a series of blog posts have noted. The situation is summed up in a new \\\"DLA Piper GDPR google analytics\",\"breadcrumb\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/#primaryimage\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2022\/01\/1280px-Wildschonau_feiert_Neues_Jahr_06.jpg\",\"contentUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2022\/01\/1280px-Wildschonau_feiert_Neues_Jahr_06.jpg\",\"width\":1280,\"height\":807},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.privateinternetaccess.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Bombshell Decision That Use of Google Analytics in Austria Violates Top EU Court\u2019s Ruling Boosts GDPR Impact Again\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#website\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/\",\"name\":\"PIA\",\"description\":\"Online privacy news from around the world.\",\"publisher\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.privateinternetaccess.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\",\"name\":\"Private Internet Access\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png\",\"contentUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png\",\"width\":1200,\"height\":1200,\"caption\":\"Private Internet Access\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/privateinternetaccess\/\",\"https:\/\/x.com\/buyvpnservice\",\"https:\/\/www.instagram.com\/piavpn\/\",\"https:\/\/www.youtube.com\/channel\/UClyJZ47Rizb1xnwuKXDI0_w\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775\",\"name\":\"Glyn Moody\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g\",\"caption\":\"Glyn Moody\"},\"description\":\"Glyn Moody is a freelance journalist who writes and speaks about privacy, surveillance, digital rights, open source, copyright, patents and general policy issues involving digital technology. He started covering the business use of the Internet in 1994, and wrote the first mainstream feature about Linux, which appeared in Wired in August 1997. His book, \\\"Rebel Code,\\\" is the first and only detailed history of the rise of open source, while his subsequent work, \\\"The Digital Code of Life,\\\" explores bioinformatics - the intersection of computing with genomics.\",\"sameAs\":[\"http:\/\/opendotdotdot.blogspot.com\/\",\"https:\/\/www.linkedin.com\/in\/glynmoody\/\",\"https:\/\/x.com\/http:\/\/twitter.com\/glynmoody\"],\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/author\/glynmoody\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Bombshell Decision That Use of Google Analytics in Austria Violates Top EU Court\u2019s Ruling Boosts GDPR Impact Again","description":"The GDPR is finally beginning to make itself felt more strongly, as a series of blog posts have noted. The situation is summed up in a new \"DLA Piper GDPR google analytics","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/","og_locale":"en_US","og_type":"article","og_title":"Bombshell Decision That Use of Google Analytics in Austria Violates Top EU Court\u2019s Ruling Boosts GDPR Impact Again","og_description":"The GDPR is finally beginning to make itself felt more strongly, as a series of blog posts have noted. The situation is summed up in a new \"DLA Piper GDPR google analytics","og_url":"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/","og_site_name":"PIA","article_publisher":"https:\/\/www.facebook.com\/privateinternetaccess\/","article_published_time":"2022-01-24T16:00:00+00:00","article_modified_time":"2022-01-25T10:49:00+00:00","og_image":[{"width":1280,"height":807,"url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2022\/01\/1280px-Wildschonau_feiert_Neues_Jahr_06.jpg","type":"image\/jpeg"}],"author":"Glyn Moody","twitter_card":"summary_large_image","twitter_creator":"@http:\/\/twitter.com\/glynmoody","twitter_site":"@buyvpnservice","twitter_misc":{"Written by":"Glyn Moody","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/#article","isPartOf":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/"},"author":{"name":"Glyn Moody","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775"},"headline":"Bombshell Decision That Use of Google Analytics in Austria Violates Top EU Court\u2019s Ruling Boosts GDPR Impact Again","datePublished":"2022-01-24T16:00:00+00:00","dateModified":"2022-01-25T10:49:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/"},"wordCount":947,"commentCount":0,"publisher":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/#primaryimage"},"thumbnailUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2022\/01\/1280px-Wildschonau_feiert_Neues_Jahr_06.jpg","keywords":["austria","cjeu","edpb","edps","Facebook","gdpr","google","google analytics","max schrems","netherlands","Privacy Shield"],"articleSection":["General Privacy News","Governments","Social Media","Surveillance"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/","url":"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/","name":"Bombshell Decision That Use of Google Analytics in Austria Violates Top EU Court\u2019s Ruling Boosts GDPR Impact Again","isPartOf":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/#primaryimage"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/#primaryimage"},"thumbnailUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2022\/01\/1280px-Wildschonau_feiert_Neues_Jahr_06.jpg","datePublished":"2022-01-24T16:00:00+00:00","dateModified":"2022-01-25T10:49:00+00:00","description":"The GDPR is finally beginning to make itself felt more strongly, as a series of blog posts have noted. The situation is summed up in a new \"DLA Piper GDPR google analytics","breadcrumb":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/#primaryimage","url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2022\/01\/1280px-Wildschonau_feiert_Neues_Jahr_06.jpg","contentUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2022\/01\/1280px-Wildschonau_feiert_Neues_Jahr_06.jpg","width":1280,"height":807},{"@type":"BreadcrumbList","@id":"https:\/\/www.privateinternetaccess.com\/blog\/bombshell-decision-that-use-of-google-analytics-in-austria-violates-top-eu-courts-ruling-boosts-gdpr-impact-again\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.privateinternetaccess.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Bombshell Decision That Use of Google Analytics in Austria Violates Top EU Court\u2019s Ruling Boosts GDPR Impact Again"}]},{"@type":"WebSite","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#website","url":"https:\/\/www.privateinternetaccess.com\/blog\/","name":"PIA","description":"Online privacy news from around the world.","publisher":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.privateinternetaccess.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization","name":"Private Internet Access","url":"https:\/\/www.privateinternetaccess.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png","contentUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png","width":1200,"height":1200,"caption":"Private Internet Access"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/privateinternetaccess\/","https:\/\/x.com\/buyvpnservice","https:\/\/www.instagram.com\/piavpn\/","https:\/\/www.youtube.com\/channel\/UClyJZ47Rizb1xnwuKXDI0_w"]},{"@type":"Person","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775","name":"Glyn Moody","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g","caption":"Glyn Moody"},"description":"Glyn Moody is a freelance journalist who writes and speaks about privacy, surveillance, digital rights, open source, copyright, patents and general policy issues involving digital technology. He started covering the business use of the Internet in 1994, and wrote the first mainstream feature about Linux, which appeared in Wired in August 1997. His book, \"Rebel Code,\" is the first and only detailed history of the rise of open source, while his subsequent work, \"The Digital Code of Life,\" explores bioinformatics - the intersection of computing with genomics.","sameAs":["http:\/\/opendotdotdot.blogspot.com\/","https:\/\/www.linkedin.com\/in\/glynmoody\/","https:\/\/x.com\/http:\/\/twitter.com\/glynmoody"],"url":"https:\/\/www.privateinternetaccess.com\/blog\/author\/glynmoody\/"}]}},"_links":{"self":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/19944","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/comments?post=19944"}],"version-history":[{"count":32,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/19944\/revisions"}],"predecessor-version":[{"id":29240,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/19944\/revisions\/29240"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/media\/19948"}],"wp:attachment":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/media?parent=19944"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/categories?post=19944"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/tags?post=19944"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}