Re:UK Government's Payment Infrastructure Is Now Open Source
by Nursie on Tuesday August 22, 2017 @09:40AM
(#15072240)
>> GDS’s GA Premium account contractually prevents Google from investigating the data
And we all know that means it's safe forever, and isn't in any sort of jeopardy the moment it crosses a border, or in fact the moment it escapes to a third party at all.
It's all industry standard so it must be fine!
>> For what it’s worth, for extremely sensitive projects like GOV.UK Verify other options are fine; Verify uses a local Piwik instance.
Then gov.uk should use a local Piwik instance for everything, GDS are clearly not incapable of it.
FYI I can and do block google analytics JS. It shouldn't be there in the first place, I shouldn't have to block it when interacting with my own government.
And we all know that means it's safe forever, and isn't in any sort of jeopardy the moment it crosses a border, or in fact the moment it escapes to a third party at all.
It's all industry standard so it must be fine!
>> For what it’s worth, for extremely sensitive projects like GOV.UK Verify other options are fine; Verify uses a local Piwik instance.
Then gov.uk should use a local Piwik instance for everything, GDS are clearly not incapable of it.
FYI I can and do block google analytics JS. It shouldn't be there in the first place, I shouldn't have to block it when interacting with my own government.