News for hackers. Stuff that matters.

A comment on Google Analytics 4 Has Me So Frustrated, We Built Our Own Analytics Service. Parent comment

Re:Google Analytics 4 Has Me So Frustrated, We Built Our Own... by cccbbbaaa on Wednesday May 17, 2023 @03:53PM (#35980395)
CNIL disagrees and says you can need them to secure your service. Legitimate interest (art. 6(1)f) is applicable (recital 49). You can also be required by law to keep them for some time, so legal requirement is applicable (art. 6(1)c). Other uses may require consent.

Cf: https://www.cnil.fr/sites/default/files/atoms/files/recomman... (in French, though)

[ Parent | on HN ]
Re:Google Analytics 4 Has Me So Frustrated, We Built Our Own... by whstl on Wednesday May 17, 2023 @04:32PM (#35980902)
Exactly. It's not just about what you collect and store, but also about what you do with the information.

You can collect them as a legal requirement, or for "legitimate interest" purposes such as fraud prevention. But you can't use this data for analytics without proper consent.

[ Parent | on HN ]
Re:Google Analytics 4 Has Me So Frustrated, We Built Our Own... by mpeg on Wednesday May 17, 2023 @06:08PM (#35981875)
Contractual basis too, is often the easiest way to collect and store PII. Eg if you have a contract with someone you can often store a lot of their data to fulfil the contract.

There is meant to be a sense of proportionality, but as many things with privacy laws it's subject to interpretation and intentionally left vague.

[ Parent | on HN ]