Austrian Supervisory Authority Finds that Website Deploying Google Analytics Carried out Unlawful Transfers to the US
On December 22, 2021, the Austrian Supervisory Authority found that an Austrian website that implemented the (free version of) Google analytics violated the GDPR’s rules on international data transfers.
The Authority decided that the Standard Contractual Clauses, combined with the Austrian website operator’s supplementary measures to transfer personal data to Google LLC in the US, did not ensure an adequate level of data protection. Accordingly, the data transfer to the US violated the GDPR.
