Back to Cases
technologytechnology · 2022
Webpage operator (Google Analytics user)
The DSB issued a landmark ruling that an Austrian website operator violated GDPR by using Google Analytics, which transferred European users' data to the United States without adequate safeguards following the Schrems II ruling. This was one of the first EU regulatory decisions against Google Analytics use post-Schrems II.
Fine ImposedEUR N/A
Authority
DSB
Regulation
Key Takeaways
- Using US-hosted analytics services (Google Analytics) constitutes a GDPR-violating data transfer without adequate safeguards.