February 11, 2022
Update on Google Analytics decisions: Contentsquare's statement
- What are the Google Analytics decisions ruling?
On January 12, 2022, the Austrian Data Protection Authority (‘DPA’) published that an Austrian website operator violated Article 44 of the General Data Protection Regulation (‘GDPR’) for transferring personal data to the US (Google LLC) through continuous use of Google Analytics, without guaranteeing an adequate level of protection as required by the GDPR (please see our publication here).
On February 10, 2022 the CNIL (the French Data Protection Authority) confirmed that position and ordered a French website operator to comply with the GDPR, and if necessary, to stop using Google Analytics under the current conditions.
These decisions followed 101 complaints filed by Noyb (European advocacy group) in the 27 EU Members States, on the basis of the Schrems II judgment that invalidated the adequacy decision to transfer personal data to the US (Privacy Shield) due to the lack of protection against US surveillance programs and access to EU individuals personal data by US law enforcement authorities.
- What do these decisions mean for Contentsquare?
Following these decisions, we would like to reassure that our customers are able to continue using our services for better experience analytics. Our rigorous contractual, technical, and organizational measures are, and will continue to be, in full compliance with legal and regulatory requirements.
This includes ISO 27701 and ISO 27001 certification — a standard of best practices for managing information security and privacy in compliance with legal frameworks such as GDPR.
Today, our EU customer's data is stored exclusively in the EU (in Ireland, Sweden and the Netherlands).
Although we believe our current measures are sufficient to protect our EU customers’ data, we think it’s important to assess the impact of these decisions on Contentsquare’s data processing activities. As such our Privacy and Security teams are currently reviewing the data protection measures in place to assess whether supplementary safeguards are required. We will make available the result of such assessment once completed.
For more information on Contentsquare's data protection practices, please visit our Privacy Center.