French watchdog rules use of Google Analytics illegal
The French data protection authority CNIL, in cooperation with its European counterparts, analysed the conditions under which data collected through the use of Google Analytics was transferred to the United States and the risks incurred for the individuals concerned.
CNIL decided that although Google has adopted additional measures to regulate data transfers in the context of the Google Analytics functionality, these are not sufficient to exclude the accessibility of this data for US intelligence services.
There is therefore a risk for French website users who use this service and whose data is exported. The CNIL notes that the data of Internet users is thus transferred to the United States in violation of Articles 44 et seq. of the GDPR.
Source: Use of Google Analytics and data transfers to the United States: the CNIL orders a website manager/operator to comply | CNIL