Another kicking has been leveled at American tech giants by EU regulators as Italy's data protection authority ruled against transfers of data to the US using Google Analytics.

The [1]ruling by the Garante was made yesterday as regulators took a close look at a website operator who was using Google Analytics. The regulators found that the site collected all manner of information.

So far, so normal. Google Analytics is commonly used by websites to analyze traffic. Others exist, but Google's is very much the big beast. It also performs its analysis in the USA, which is what EU regulators have taken exception to. The place is, after all, "a country without an adequate level of data protection," according to the regulator.

[2]

Italy is only the latest country to aim a boot at Google's rump. Earlier this year, [3]the Austrian watchdog ruled that GDPR had been breached by a German's company using Google Analytics. [4]France weighed in shortly after and now Italy has had its say. It's almost as if sending the data of EU citizens out for processing in the US, where intelligence services can get their hands on it, is a bad thing.

[5]

[6]

Other US tech giants will be keeping a watchful eye on Google's travails, since it is hardly the only company to transfer data for processing. For its part, Microsoft has promised to process all EU data within EU borders as part of its EU Data Boundary initiative.

[7]Ireland: Meta fined $18.6m for breaking EU's GDPR

[8]EU, US close to replacing defunct Privacy Shield II

[9]France says Google Analytics breaches GDPR when it sends data to US

[10]Tougher rules on targeted ads, deepfakes, crafty web design, and more? Euro lawmakers give a thumbs up

The Italian authority took the opportunity to issue a stern warning to Italian websites (both public and private) regarding what it said was the "illegality" of data transfers made to the US through the use of Google Analytics. It also noted that "the measures that integrate the transfer tools adopted by Google do not currently guarantee an adequate level of protection of users' personal data."

A 90-day deadline has been set to bring transfers into compliance with GDPR and the Italian authority plans ad-hoc inspections to verify things are to its liking. This means pretty much halting the use of Google Analytics .

For its part, Google claims that Analytics is merely a service to help understand how visitors use a site rather than as a means to track individuals. The company has published a [11]lengthy article on privacy controls in the tool.

[12]

However, European regulators seem unimpressed, and Italy's is the latest voice to join the chorus of disapproval regarding the transferring of data to places lacking the same privacy regulations.

The Register asked Google for its take on the comments and will update should the search giant respond. ®

Get our [13]Tech Resources



[1] https://www.gpdp.it/web/guest/home/docweb/-/docweb-display/docweb/9782874

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YrY0AwRZpGMs3F3OLnpDvgAAAFM&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://www.theregister.com/2022/01/13/google_analytics_gdpr/

[4] https://www.theregister.com/2022/02/10/google_analytics_gdpr_breach/

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YrY0AwRZpGMs3F3OLnpDvgAAAFM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YrY0AwRZpGMs3F3OLnpDvgAAAFM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[7] https://www.theregister.com/2022/03/16/meta_gdpr_fine/

[8] https://www.theregister.com/2022/03/02/new_hope_for_privacy_shield/

[9] https://www.theregister.com/2022/02/10/google_analytics_gdpr_breach/

[10] https://www.theregister.com/2022/01/22/eu_dsa_draft_meps/

[11] https://support.google.com/analytics/answer/9019185

[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YrY0AwRZpGMs3F3OLnpDvgAAAFM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[13] https://whitepapers.theregister.com/