Published in News

Italians say struffoli to Google Analytics

by on24 June 2022

You can’t transfer data to the US

The Italian data protection authority has found a local web publisher's use of Google analytics is non-compliant with EU data protection rules because it transfers data to a third-world country, which lacks a civilized legal framework.

Apparently, the US lacks an equivalent legal framework to protect the info from being accessed by US spooks. The web publisher's use of Google Analytics resulted in the collection of many types of user data, including device IP address, browser information, OS, screen resolution, language selection, plus the date and time of the site visit, which were transferred to the US without adequate supplementary measures being applied to raise the level of protection to the necessary EU legal standard.

Google Protections were not sufficient to address the risk, it added, echoing the conclusion of several other EU DPAs who have also found use of Google Analytics violates the bloc's data protection rules over the data export issue.

Italy's DPA has given the publisher Caffeina Media 90 days to fix the compliance violation. But the decision has wider significance as it has warned other local websites that are using Google Analytics to check their own compliance.

"The Authority draws the attention of all Italian managers of websites, public and private, to the illegality of transfers made to the United States through Google Analytics. Given a large number of reports and questions that are being received by the Office, data controllers should verify the compliance of the methods of use of cookies and other tracking tools used on its websites, with particular attention to Google Analytics and other similar services, with the legislation on the protection of personal data."

Google is reviewing the Italian DPA's decision, according to the spokesperson. It said that punters wanted websites they visit to be well designed, easy to use, and respectful of their privacy.

“Google Analytics helps publishers understand how well their sites and apps are working for their visitors -- but not by identifying individuals or tracking them across the web. These organisations, not Google, control what data is collected with these tools, and how it is used. Google helps by providing a range of safeguards, controls and resources for compliance," the outfit said.


Last modified on 24 June 2022
Rate this item
(0 votes)

Read more about: