The data protection authority (DPA) of Rhineland-Palatinate has concluded its investigation into the legality of Web site analysis tools, finding that many companies are breaching data protection law in using them. The DPA found that the companies are failing to notify individuals about the use of analytics and are failing to obtain the required consent to transfer personal data to the United States, reports the Hunton & Williams Privacy and Information Security Law Blog. The DPA also found that companies' data processor agreements "do not meet the statutory requirements for such agreements pursuant to the Federal Data Protection Act."
Full Story