The Autoriteit Persoonsgegevens has completed its investigation into Google Analytics. We won't hear whether Google's statistics package violates the General Data Protection Regulation (AVG) until the course of the year. That may mean that companies and organizations may not be allowed to use the program in the near future.
A spokesman for the regulator confirms this to Nu.nl (1).
The use of Google Analytics has been under discussion for some time. The Datenschutzbehörde (DSB) was the first national regulator to say that using the software to track website statistics violates European privacy laws. The Austrian regulator considered that Google's analytics software continuously collects and stores Internet users' IP addresses and cookie data on servers in the US.
Not much later, the Norwegian regulator EDPS drew a similar conclusion. The privacy watchdog points out that Google Analytics collects IP addresses that can be traced back to individual users. It is possible to mask IP addresses, but that does not solve the problem, according to the regulator. That's because Google Analytics also collects cookie data. That makes it possible to link user data to users when they are logged into their Google account. That violates European privacy laws, and is therefore illegal.
French regulator CNIL is also troubled on which data of website visitors are sent to the U.S. and processed there. "Although Google has drafted several measures to regulate data transmission to other countries, these are not sufficient to protect access by U.S. intelligence agencies," said the CNIL
The Autoriteit Persoonsgegevens (AP) warned in January that the use of Google Analytics "may soon" no longer be allowed. This warning can still be found on the regulator's website. The AP launched an investigation into the use of Google Analytics in the Netherlands by two websites. Which sites are involved is unknown.
The investigation has now been completed, a spokesman for the Autoriteit Persoonsgegevens told NU.nl. "The results are with the Enforcement Department of the AP. That department checks the investigation and gives the websites investigated and Google a chance to respond." The department also decides whether Google will be fined or not.
According to the spokesman, it is now too early to comment on this. He points out that the regulator will present its conclusions "in the course of this year." Then we will know for sure whether website owners in the Netherlands may use Google Analytics to map the behavior of their visitors.
Google bijt van zich af en verdedigt het gebruik van het statistiekprogramma in Europa. Via een blog schreef de zoekmachinegigant dat IP-adressen geanonimiseerd kunnen worden. Daarvoor moeten zij een algemene sitetag (gtaj.js) aan het <HEAD>-gedeelte van hun site toevoegen.
Also, the search giant stressed that Google Analytics cannot be used to monitor people on the Internet or in applications, or create user profiles. "Google Analytics helps website and app owners understand how their users interact with their sites and apps, and only with their sites and apps," the tech company stressed. Moreover, the data collected by Google Analytics cannot be used to identify visitors.
Further, the search engine giant said businesses and organizations are responsible for what data they collect with Google Analytics. Google provides them with a variety of tools to comply with local or regional laws and regulations, including the AVG. Moreover, using browser add-ons, Internet users have their own control to disable Google's analytics software.
Finally, Google Analytics cannot be used to show targeted ads based on special personal data. This includes ads about health, ethnicity, political affiliation or sexual orientation.
https://www.nu.nl/tech/6203705/nog-onduidelijk-of-google-analytics-in-nederland-gebruikt-mag-blijven-worden.html
