Can European companies still use Google Analytics?
The Privacy Shield between the United States and the European Union was unfortunately invalidated in 2020, due to the lack of guarantees it offered regarding the risk of access to the personal information of European residents.
On this subject, Google, which, according to the CNIL (National Commission for Information Technology and Civil Liberties), does not offer sufficiently convincing measures to rule out the risk of so-called access to the personal information of European residents.
Many questions arise around this new formal notice from the CNIL (National Commission for Information Technology and Civil Liberties) regarding the use of Google Analytics:
- Do organizations have a deadline to comply?
- Would it be possible to configure Google Analytics so that personal data is not transferred outside the European Union?
- Could encryption be a sufficient additional safeguard? etc.