FineME
Back to Cases
technologytechnology · 2022

Webpage operator (Google Analytics user)

The DSB issued a landmark ruling that an Austrian website operator violated GDPR by using Google Analytics, which transferred European users' data to the United States without adequate safeguards following the Schrems II ruling. This was one of the first EU regulatory decisions against Google Analytics use post-Schrems II.

Fine ImposedEUR N/A
Authority

DSB

Regulation

Key Takeaways
  • Using US-hosted analytics services (Google Analytics) constitutes a GDPR-violating data transfer without adequate safeguards.