News for hackers. Stuff that matters.

A comment on Using Google Analytics without GDPR consent. Parent comment

Re:Using Google Analytics without GDPR consent by simpss on Friday December 04, 2020 @08:07AM (#25301813)
log files have a different original purpose. But yes, if you repurpose your log files to track individual users granularly, that processing would be illegal without gathering informed consent first.
[ Parent | on HN ]
Re:Using Google Analytics without GDPR consent by Dayshine on Friday December 04, 2020 @08:16AM (#25301896)
The key caveat here is:

Unless it's necessary. The legitimate interests basis of the GDPR allows you to make a balanced decision of your business requirements against user privacy expectations.

[ Parent | on HN ]
Re:Using Google Analytics without GDPR consent by simpss on Friday December 04, 2020 @08:21AM (#25301941)
yes, and you have to line out how the processing is necessary for providing the service, there has to be no less-intrusive method of achieving the desired result and be ready to prove it.

hint, user-level analytics rarely is. And in this specific example, repurposing logs kept for one purpose(ex, security/auditing) to user analytics is definitely not something you can just do

[ Parent | on HN ]
Re:Using Google Analytics without GDPR consent by GordonS on Friday December 04, 2020 @01:23PM (#25305818)
An example that's explicitly called out as allowed is using logs for security purposes.
[ Parent | on HN ]