The French data protection authority (CNIL) decided that using Google Analytics violates the GDPR and ordered three French website controllers to bring their practices into compliance. The decision follows earlier Austrian DPA rulings and the EU Court of Justice Schrems II judgment that US transfers under FISA 702 and EO 12.333 are unlawful.
Why it matters: The CNIL decision makes Google Analytics unlawful for EU sites, forcing controllers to stop illegal US data transfers.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
