News for hackers. Stuff that matters.

A comment on Companies must stop using Google Analytics. Parent comment

Re:Companies must stop using Google Analytics by poniko on Tuesday July 04, 2023 @05:54AM (#36584432)
Because of the law in US that the governments have right to all data stored on any server that a US company or its subsidiaritets own. That clash with the EU GDPR law and the fact that Sweden categorize IP-adress as a Privacy data point.

I.e they can switch to a European vendor that do tracking and analytics.

[ Parent | on HN ]
Re:Companies must stop using Google Analytics by he0001 on Tuesday July 04, 2023 @06:24AM (#36584683)
> the fact that Sweden categorize IP-adress as a Privacy data point

Static IP-adresses are considered identity by EU court[0]. There have been several verdicts where EU court have ruled them subjective to GDPR.

[0] https://curia.europa.eu/juris/liste.jsf?language=en&num=C-70...

[ Parent | on HN ]
Re:Companies must stop using Google Analytics by poniko on Tuesday July 04, 2023 @06:49AM (#36584892)
yes? You can still store data within Sweden/EU that contains GDPR data, you just need to have a valid reason and comply with the GDPR rules i.e remove the data when you don't need them for the reason you where saving them. Store the data outside EU is never ok.
[ Parent | on HN ]
Re:Companies must stop using Google Analytics by alkonaut on Tuesday July 04, 2023 @07:18AM (#36585144)
But if you wash the IP and any other PII then you can store it anywhere? So why store IP? Is it because GA doesn't offer an option to wipe PII from the messages?
[ Parent | on HN ]
Re:Companies must stop using Google Analytics by poniko on Tuesday July 04, 2023 @07:32AM (#36585260)
This is where it gets tricky and why I need to find out more details about the new rulings. Google does not store IP when the user is from the EU but this still seems inadequate to the IMY.

https://support.google.com/analytics/answer/12017362?hl=en

[ Parent | on HN ]
Re:Companies must stop using Google Analytics by alkonaut on Tuesday July 04, 2023 @07:42AM (#36585360)
So long as all PII is cleared client side and not merely dropped before storage I can’t see any issues with GDPR?
[ Parent | on HN ]
Re:Companies must stop using Google Analytics by AbhiAmbad on Tuesday July 04, 2023 @06:18AM (#36584632)
yeah, This is the great option also.
[ Parent | on HN ]