Sweden’s data protection watchdog has warned companies against using Google Analytics, citing the risks posed by US government surveillance, following similar moves in Austria, France and Italy last year.
The development comes as a result of an audit initiated by the Swedish Privacy Agency (IMY) against four companies: CDON, Coop, Dagens Industri and Tele2.
โIMY has determined in its audit that data transferred to the United States via Googleโs statistical tools is personal data as it may be linked to other unique data transferred,โ IMY said. said. Said.
โThe authorities also conclude that the technical security measures taken by the companies are basically not sufficient to ensure a level of protection comparable to that guaranteed within the EU/EEA.โ
The data protection authority also fined Swedish telecommunications service provider Tele2 $1.1 million and local online marketplace CDON less than $30,000 for failing to take appropriate security measures to anonymize data before transfer. imposed.
Additionally, CDON, Coop and Dagens Industri have been ordered to stop using Google Analytics. Tele2 has voluntarily stopped using the service.
The IMY added that the investigation was based on a complaint filed by the privacy nonprofit None of Your Business (noyb). claim Violation of General Data Protection Regulation (GDPR) laws.
This decision was made in light of potential surveillance concerns that data stored on US servers could be accessed by domestic intelligence agencies, and that such EU-US data transfers are Rooted in the fact that it was determined to be illegal.
Similar concerns have resulted in Meta being fined a record $1.3 billion by European Union data protection authorities. That said, the EU and US are currently Finishing be New data transfer arrangementsis called the EU-US Data Privacy Framework, which replaces the now-defunct Privacy Shield.