Recently, the Austrian Data Protection Authority (DPA) determined that a local website’s use of Google Analytics violated the GDPR because of the potential for US intelligence agencies to obtain user data. It also led Dutch authorities to say it was investigating two similar claims in the Netherlands and that it would soon issue a decision on whether to ban Google Analytics. In light of these events, Google has now published a blog post highlighting the need for a robust EU-US data transfer framework.
Google points out that the global scale of the web business and the ability to share information through data streams brings significant benefits to the economy. It said the dissemination of high-value media and information services would facilitate billions of euros in inflows to the EU alone over the next few years. Therefore, it is necessary to develop a strong framework for EU-US data flows as soon as possible.
When talking about the decision of the Austrian DPA, Google expressed disapproval. The company said it has provided Analytics services to businesses around the world for the past 15 years and has never received a request from U.S. intelligence agencies to share Google Analytics data. Nor does it expect such a request to come anytime soon, given the region’s strict laws.
In addition, Google also emphasized that it has provided customers with some additional measures to protect their data. While the Austrian ruling affects only one publisher so far, it fears a catastrophically sharp decline, the theoretical risk that businesses will lose access to Google Analytics. The tech company highlighted this as a risk to the global economy.
To this end, Google proposes that an EU-US data flow framework should be developed as soon as possible to protect the respective interests of all parties involved. Whether or not governments heed their urgent calls for such a framework, Google said it will continue to ensure the highest levels of data protection practices across all of its products.