The Swedish Data Protection Authority (IMY) issued decisions against four companies for unlawful EU‑US data transfers via Google Analytics. It imposed a fine of 12 mio SEK (≈€1 M) on Tele2 and 300 000 SEK on CDON. The authority also ordered the companies to stop using the tool.
Why it matters: The first major GDPR fine for using Google Analytics highlights enforcement of EU‑US data‑transfer rules.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
