French Data Protection Authority Publishes Q&A Regarding Use Of Google Analytics

The French Data Protection Authority (CNIL) has released a Q&A providing its controversial position, possible alternative solutions as well as guidance on using a compliant audience measurement solution in light of data transfer rules. It follows a set of formal notices issued by the CNIL to French companies using Google Analytics on their websites, in which the CNIL has indicated that, in its view, using this solution is not compliant with GDPR's international data transfer rules.

Background

Following complaints from the NOYB association regarding the use of the Google Analytics audience measurement solution, the French Data Protection Authority (CNIL) had issued several formal notices to French companies using this solution on their websites. These decisions were issued in the context of other decisions from European data protection authorities, and following the European Court of Justice's (ECJ) Schrems II ruling invalidating the Privacy Shield and imposing