Finland's DPA issues Google Analytics data transfers decision

Finland's Office of the Data Protection Ombudsman ordered the Finnish Meteorological Institute to halt EU-U.S. data transfers using Google Analytics and Google's reCAPTCHA. The ombudsman ruled the institute had no legal basis for processing to facilitate data flows and continued transfers based on cookie consent despite the invalidation of the EU-U.S. Privacy Shield by the Court of Justice of the European Union in July 2020. The institute has removed the Google tools from its website and was ordered to delete all data that had been transferred without legal basis.