![\"\"](\"\/\/www.iser-br.com\/Themes\/Release\/images\/responsive\/ettelecom-default.jpg\")
More than half of the world's websites use Google Analytics<\/a> to help their owners understand the behaviour of users.
The software, which deploys cookies to track user behaviour, costs nothing in cash terms -- though the vast trove of data helps to fuel Google<\/a>'s massive profits.
However, in 2020 the framework overseeing how personal data<\/a> is transferred from the EU to US was struck down by EU judges over concerns about snooping by US spy agencies<\/a>.
Activists have since filed dozens of cases with regulators in Europe arguing that the tool breaches the fundamental rights of EU nationals.
Regulators in several countries have ruled in favour of the activists and declared Google Analytics incompatible with European data privacy regulation (GDPR<\/a>).
The rulings leave many European firms in a bind.
They can ditch Google and move to a privacy-compliant option that costs money, or wait it out and hope for a solution from Google, the regulators or the politicians.
On Friday, the US and EU announced they had agreed in principle a new framework to allow data transfers, but did not provide further details.
Austrian lawyer Max Schrems, who spearheaded the campaign to invalidate the previous agreements, wrote on Twitter that it seemed like another \"patchwork\" approach with no substantial reform to US snooping rules.
\"Let's wait for a text, but my first bet is it will fail again,\" he wrote.
Potential fixes<\/strong>
Last week, Google said it would release a new version of its software that would not store IP addresses, the unique code that can identify individual computers.
The US firm has also built data centres in Europe.
However, the impact of these potential fixes is unclear. Regulators have not yet commented.
\"Data protection authorities do not have the solution,\" says Florence Raynal of French regulator CNIL, which has ruled against Google.
\"That solution must be provided by governments at a political level.\"
US companies are subject to a law known as the Cloud Act<\/a> that allows US security agencies to access the data of foreign citizens regardless of where it is stored.
Although Google has argued that the risk posed by the Cloud Act is theoretical, it nevertheless makes it difficult for US firms to comply with the GDPR.
'At a crossroads'<\/strong>
Marie-Laure Denis, head of CNIL, which is seen as a leader whose rulings are followed by other regulators, summed up the dilemma at a conference of the International Association of Privacy Professionals (IAPP<\/a>) in Paris last week.
She said of American companies that \"their business model should evolve, or the American legal framework should evolve\".
But she accepted that the situation for European firms using Google Analytics was \"complicated\".
Pascal Thisse, who runs an agency advising companies on how to comply with GDPR, says firms find themselves \"at a crossroads\" with no clear idea of the path to take.
\"If you tell a client who uses Google Ads to remove Google Analytics, everything collapses because it is the foundation of the system,\" he says.
But to comply with European rulings, companies would need to prove that US intelligence is not interested in the data collected -- an undertaking well beyond the means of small firms.
Lawyer Schrems also accepts there is no easy fix.
\"It's hard for us because usually we try to litigate stuff where there is a solution and in this case we have a political problem,\" he told a virtual event last week before the US-EU announcement.
He said US law allowed mass surveillance on non-American citizens, which clashed with the EU's charter on fundamental rights.
\"Either the US changes its laws or the European Union changes its fundamental founding principles,\" he said.
<\/body>","next_sibling":[{"msid":90452942,"title":"Critics raise privacy fears over EU message app rule","entity_type":"ARTICLE","link":"\/news\/critics-raise-privacy-fears-over-eu-message-app-rule\/90452942","category_name":null,"category_name_seo":"telecomnews"}],"related_content":[],"msid":90453025,"entity_type":"ARTICLE","title":"How European rulings imperil flagship Google product","synopsis":"More than half of the world's websites use Google Analytics to help their owners understand the behaviour of users.","titleseo":"telecomnews\/how-european-rulings-imperil-flagship-google-product","status":"ACTIVE","authors":[],"Alttitle":{"minfo":""},"artag":"AFP","artdate":"2022-03-26 08:26:04","lastupd":"2022-03-26 08:35:32","breadcrumbTags":["google","google flagship","internet","google analytics","personal data","spy agencies","Google's flagship products","gdpr","cloud act","iapp"],"secinfo":{"seolocation":"telecomnews\/how-european-rulings-imperil-flagship-google-product"}}" data-authors="[" "]" data-category-name="" data-category_id="" data-date="2022-03-26" data-index="article_1">
超过一半的全球网站使用谷歌分析帮助主人理解用户的行为。
软件,部署饼干来跟踪用户行为,花一分钱现金而言,尽管数据有助于燃料的巨大宝库谷歌巨大的利润。
然而,在2020年框架监督如何个人资料从欧盟转移到我们就否决了欧盟在窥探我们的担忧法官间谍机构。
活动人士已经提出许多情况下在欧洲监管机构认为违反欧盟公民的基本权利的工具。
监管机构在一些国家统治的活动家和宣布谷歌分析不符合欧洲数据隐私条例(GDPR)。
裁决让许多欧洲公司陷入了困境。
他们可以抛弃谷歌,搬到一个privacy-compliant选项,要花钱,或者等待和希望解决方案从谷歌,监管机构或政客。
周五,美国和欧盟宣布他们已原则上同意一个新的框架允许数据传输,但没有提供进一步的细节。
奥地利律师马克斯•Schrems发起运动失效之前的协议,在Twitter上写道,它似乎是另一个“拼凑”的方法,没有实质性的改革对我们窥探规则。
“让我们等待一个文本,但我第一次打赌它将再次失败,”他写道。
潜在的修复
上周,谷歌表示,它将发布一个新版本的软件,不会存储IP地址,独特的代码,它可以识别个人电脑。
我们公司也在欧洲建立数据中心。
然而,这些潜在的修复的影响尚不清楚。监管机构尚未发表评论。
“数据保护部门没有解决方案,”弗洛伦斯Raynal说法国监管机构yann padova否决了谷歌。
”,解决方案必须提供由政府在政治层面上。”
美国公司受到法律的云的行为让我们安全机构访问数据存储的外国公民,不管它在哪里。
尽管谷歌认为,云计算带来的风险行为理论,它仍然让美国公司很难遵守GDPR。
“十字路口”
yann padova主管中,丹尼斯,这被视为一个领袖的裁决是紧随其后的是其他监管机构,总结了困境的国际协会的一次会议上隐私专家(IAPP上周在巴黎)。
她的美国公司说,“他们的商业模式应该发展,或美国的法律框架应该进化”。
但她承认,欧洲公司使用Google Analytics的情况是“复杂的”。
帕斯卡Thisse,他经营着一个机构建议公司如何遵守GDPR,说公司发现自己“十字路口”,没有明确的路径。
“如果你告诉一个客户使用谷歌广告删除谷歌分析,一切都崩溃,因为它是系统的基础,”他说。
但符合欧洲裁决,公司需要证明美国情报收集的数据不感兴趣——一个事业远远超出了小公司的手段。
律师Schrems还接受没有轻而易举的解决办法。
“很难因为通常我们试图提出诉讼的东西哪里有一个解决方案,在这种情况下,我们有一个政治问题,”他告诉一个虚拟事件上周在欧美声明之前。
他说美国法律允许质量监测在非美国公民,这与欧盟基本权利宪章。
“要么我们改变其法律、欧盟改变其基本的建国原则,”他说。
评论
现在评论 阅读评论(1)所有评论
找到这个评论进攻?
下面选择你的理由并单击submit按钮。这将提醒我们的版主采取行动