Post by nadinenadine on Mar 10, 2024 3:47:26 GMT
As we promised at the end of June, after the stop to Google Analytics by the Privacy Guarantor which we commented on on LinkedIn , we return with an in-depth analysis of what is advisable to do in September, at the end of the 90 days indicated by the Guarantor himself. Google Analytics, after the Guarantor's pronouncement: what to do in September? Solutions and alternatives Why did the guarantor stop the use of Google Analytics? There are two cruxes to the issue: The IP address is personal data (and unfortunately the “Anonymize IP” function offered by Google's Universal Analytics does not seem to properly mask this data); The transfer of data to the USA, especially with the fall of the agreement called "Privacy Shield", poses serious privacy problems, as the USA is a "country without an adequate level of protection", as the Guarantor himself labels it, in his statement . The problem therefore does not only concern Google Analytics, but any service provided outside the EU and/or any service for which our users' data is processed by a US company (even if provided via servers located on our continent ). The same Guarantor invites all owners and managers of Italian sites to (re)verify compliance not only with regards to GA, but also for all the services used.
The statement reads, in fact [bold and underlining added by us, Editor's note]: On this occasion, the Authority calls to the attention of all Italian managers of public and private websites the illegality of transfers made to the United States through GA , also in consideration of the numerous reports Loan Phone Number List and questions that are being received by the Authority. Office. And it invites all data controllers to verify the compliance of the methods of use of cookies and other tracking tools used on their websites , with particular attention to Google Analytics and other similar services, with the legislation on the protection of personal data . “Google Analytics and other similar services,” we read. So not just Google Analytics. And not just tracking, but any “way of using cookies.
Having a YouTube video on the site (even if embedded with the version of YouTube with advanced privacy ), having the site on an Amazon server, using the AddThis service, just to name a few examples, are all activities that could potentially undermine the privacy of our users, and therefore our compliance with the GDPR. In fact, however, the Guarantor's provision focuses on GA. Furthermore, specifically, the company that was warned by the Guarantor was using the "old" version of GA, called Universal Analytics (which will be discontinued next year in favor of the new version, called "GA4", which has already been activated for a few months ). So the advice is to immediately start getting in order from this point of view, i.e. giving priority to the replacement of Universal Analytics ("UA") with another service. On many sites it is indicated that it is sufficient to switch to GA4 to sleep soundly. But the solutions presented are not limited to this. They are, in fact, different. Unfortunately, however, no one knows for sure which one is correct. Assuming there is.
The statement reads, in fact [bold and underlining added by us, Editor's note]: On this occasion, the Authority calls to the attention of all Italian managers of public and private websites the illegality of transfers made to the United States through GA , also in consideration of the numerous reports Loan Phone Number List and questions that are being received by the Authority. Office. And it invites all data controllers to verify the compliance of the methods of use of cookies and other tracking tools used on their websites , with particular attention to Google Analytics and other similar services, with the legislation on the protection of personal data . “Google Analytics and other similar services,” we read. So not just Google Analytics. And not just tracking, but any “way of using cookies.
Having a YouTube video on the site (even if embedded with the version of YouTube with advanced privacy ), having the site on an Amazon server, using the AddThis service, just to name a few examples, are all activities that could potentially undermine the privacy of our users, and therefore our compliance with the GDPR. In fact, however, the Guarantor's provision focuses on GA. Furthermore, specifically, the company that was warned by the Guarantor was using the "old" version of GA, called Universal Analytics (which will be discontinued next year in favor of the new version, called "GA4", which has already been activated for a few months ). So the advice is to immediately start getting in order from this point of view, i.e. giving priority to the replacement of Universal Analytics ("UA") with another service. On many sites it is indicated that it is sufficient to switch to GA4 to sleep soundly. But the solutions presented are not limited to this. They are, in fact, different. Unfortunately, however, no one knows for sure which one is correct. Assuming there is.