Second decision of the Austrian DPA on Google Analytics
The Austrian Data Protection Authority issued a second ruling, finding that Google’s IP anonymization is insufficient for data transfers between the EU and the US.
The Austrian DPA stated that the Website Operator had neither properly activated the option to “anonymize” website users’ IP Addresses, which is normally accessible for Google Analytics, nor requested consent from its website users for data transfers to Google LLC. Therefore use of Google Analytics violates GDPR.
Source: Second decision of the Austrian DPA on Google Analytics –
