{"id":32187,"date":"2022-06-24T13:30:41","date_gmt":"2022-06-24T13:30:41","guid":{"rendered":"https:\/\/www.digife.it\/?p=32187"},"modified":"2022-06-24T13:30:41","modified_gmt":"2022-06-24T13:30:41","slug":"google-analytics-prohibited-use-in-italy","status":"publish","type":"post","link":"https:\/\/www.digife.it\/en\/google-analytics-prohibited-use-in-italy\/","title":{"rendered":"Google Analytics - forbidden to use in Italy"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">It had already happened in France and Austria a few months ago and today also in Italy <\/span><b>Google Analytics<\/b><span style=\"font-weight: 400;\"> ends up in the viewfinder of the <\/span><b>Privacy Guarantor<\/b><span style=\"font-weight: 400;\">. Yesterday, in fact, the news that the authority for the protection of personal data has decreed that<\/span><b> Google Analytics<\/b><span style=\"font-weight: 400;\"> &quot;Violates data protection legislation because it transfers user data to the United States, a country without an adequate level of protection&quot;<\/span><a href=\"https:\/\/www.garanteprivacy.it\/home\/docweb\/-\/docweb-display\/docweb\/9782874\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">1<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">But how did this decision come about? And what consequences will there be?<\/span><\/p>\n<h3><b>The decision of the European Court of Justice<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The assumptions that led to the current situation date back as far as two years ago. In fact, in July 2020 the <\/span><i><span style=\"font-weight: 400;\">European Court of Justice<\/span><\/i><span style=\"font-weight: 400;\"> has decided to cancel an agreement entered into in 2016 between the United States and the European Union known as <\/span><a href=\"https:\/\/www.garanteprivacy.it\/home\/docweb\/-\/docweb-display\/docweb\/5306161\" target=\"_blank\" rel=\"noopener\"><b>Privacy Shield<\/b><\/a><span style=\"font-weight: 400;\">. The European body defines q<\/span><span style=\"font-weight: 400;\">his &quot;shield&quot;, which allowed the transfer of personal data of all European users to American servers, was invalid, since American legislation did not guarantee adequate privacy.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">And it is precisely in this perspective that the decision of the Guarantor to prohibit the use of <\/span><b>Google Analytics<\/b><span style=\"font-weight: 400;\">. The authority has in fact emphasized the ease with which the US Government Authorities would have access to personal data stored in their country. This would make the United States a non-compliant country <\/span><a href=\"https:\/\/www.garanteprivacy.it\/regolamentoue\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">GDPR<\/span><\/a><span style=\"font-weight: 400;\">, the privacy law currently in force in the European Union.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Furthermore, a note from the Guarantor reads: &quot;among the many data collected, the IP address of the user&#039;s device and information relating to the browser, the operating system, the screen resolution, the selected language, as well as the date and time of the visit on the web. This information was found to have been transferred to the United States. In declaring the unlawfulness of the processing, it was reiterated that the IP address constitutes personal data and even if it were truncated it would not become anonymous, given the ability of Google to enrich it with other data in its possession &quot;<\/span><a href=\"https:\/\/www.ilsole24ore.com\/art\/i-dati-finiscono-usa-vietato-l-uso-google-analytics-AENVdthB?refresh_ce=1\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">2<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<h3><b>The ban on using Google Analytics<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">A first warning was issued yesterday against Caffeina Media srl, guilty of using <\/span><b>Google Analytics<\/b><span style=\"font-weight: 400;\"> within its own sites. But the question concerns all the sites that exploit the tool, which will therefore have to study alternative solutions. Or resign yourself to the idea of no longer being able to monitor your users.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The deadline for complying with the decision is 90 days, after which the Guarantor will verify that all sites comply with the <\/span><b>European regulation for the transfer of personal data<\/b><span style=\"font-weight: 400;\">. Otherwise there is a risk of \u201csuspension of the data flows carried out, through <\/span><b>Google Analytics<\/b><span style=\"font-weight: 400;\">, to the United States &quot;and, possibly, an administrative sanction. Managers advised\u2026.<\/span><\/p>\n<h3><b>How do the site managers respond?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Who is familiar with <\/span><b>Google Analytics<\/b><span style=\"font-weight: 400;\"> knows how important this tool is for an e-commerce (<\/span><a href=\"https:\/\/www.digife.it\/en\/easy-guide-google-analytics\/\"><span style=\"font-weight: 400;\">Click here<\/span><\/a><span style=\"font-weight: 400;\"> for more information). And now that it has been banned how to do it? Following the news, website operators have begun to study alternative solutions but, despite everything, the ban on GA is destined to have a strong impact on the sector.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The solutions initially proposed include:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the abandonment of <\/span><b>Google Analytics<\/b><span style=\"font-weight: 400;\"> in favor of European paid services (and therefore with servers located in Europe);<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the use of <a href=\"https:\/\/support.google.com\/analytics\/answer\/9976101?hl=it\" target=\"_blank\" rel=\"noopener\">Google Consent Mode<\/a>;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the anonymization of data before sending them to Analytics, through proxying services;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">create your own analysis service through open source platforms.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">In reality, the situation is constantly changing. While looking for the optimal solution, in fact, we also await the transition from Universal Analytics to Google Analytics 4. The latest version of the tool treats data differently than its predecessor and allows a certain degree of anonymization.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">We just have to wait and see if these innovations will receive the approval of the <\/span><i><span style=\"font-weight: 400;\">Privacy Guarantor<\/span><\/i><span style=\"font-weight: 400;\">. In the meantime, for those wishing to further explore the topic, please refer to the section <\/span><a href=\"https:\/\/www-cnil-fr.translate.goog\/fr\/cookies-et-autres-traceurs\/regles\/questions-reponses-sur-les-mises-en-demeure-de-la-cnil-concernant-lutilisation-de-google-analytics?_x_tr_sl=auto&amp;_x_tr_tl=it&amp;_x_tr_hl=it&amp;_x_tr_pto=wapp\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CNIL FAQ<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>","protected":false},"excerpt":{"rendered":"<p>It had already happened in France and Austria a few months ago and today also in Italy Google Analytics ends up in the crosshairs of the Privacy Guarantor. It is yesterday, in fact, the ...<\/p>","protected":false},"author":35,"featured_media":32189,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[59,130,242],"tags":[],"class_list":{"0":"post-32187","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-notizie","8":"category-ecommerce","9":"category-sicurezza"},"_links":{"self":[{"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/posts\/32187","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/users\/35"}],"replies":[{"embeddable":true,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/comments?post=32187"}],"version-history":[{"count":0,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/posts\/32187\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/media\/32189"}],"wp:attachment":[{"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/media?parent=32187"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/categories?post=32187"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/tags?post=32187"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}