News for hackers. Stuff that matters.

A comment on Use of Google Analytics declared illegal by French data protection authority. Parent comment

Re:Use of Google Analytics declared illegal by French data p... by CodeBytes on Thursday February 10, 2022 @12:33PM (#30289647)
That doesn't seem to be true though. There are multiple countries outside the EU that have an adequacy decisions regarding their privacy laws like: Japan, South Korea, Canada, UK, Isreal, etc. They can host EU data without issues.

The only reason the privacy shield agreement was thrown out was due to lack of safe guards from US intelligence.

Even without the privacy shield, US companies would still be able to store EU data in a country with an adequacy decision if it wasn't for the CLOUD act. This seems more to do with US law wanting access to EU data.

[ Parent | on HN ]
Re:Use of Google Analytics declared illegal by French data p... by Vespasian on Thursday February 10, 2022 @01:12PM (#30290216)
Critically, they want access for for free.

The US does not have to give anything in return to get all the private data from EU they want.

The EU in return gets...nothing.

If you are a politician this is not a great position, you get no money, no jobs and no data.

If they equalize data access, "data sharing" (on an intelligence and on a commerical level) could be a valuable component of future negotiations.

[ Parent | on HN ]
Re:Use of Google Analytics declared illegal by French data p... by tick_tock_tick on Thursday February 10, 2022 @02:08PM (#30290954)
> The EU in return gets...nothing.

The EU gets the services they use....

[ Parent | on HN ]
Re:Use of Google Analytics declared illegal by French data p... by Vespasian on Thursday February 10, 2022 @04:09PM (#30292578)
Of course the users do (and pay for it)

However from a political standpoint that's as good as nothing.

[ Parent | on HN ]
Re:Use of Google Analytics declared illegal by French data p... by organicpotato on Thursday February 10, 2022 @04:44PM (#30293101)
Is there anything restricting US companies from first transferring EU data to a country `A` with an adequacy decision and then transferring that data to the US (assuming `A` allows this)?
[ Parent | on HN ]