France's data protection authority, the Commission nationale de l'informatique et des libertés, released a question-and-answer document related to an unidentified number of compliance notices issued to companies over data transfers carried out through Google Analytics. The Q&A explains aspects of the notices, including the 30-day compliance period, and the CNIL's stance on lawful and unlawful uses of Google Analytics. Editor's note: The IAPP's Jennifer Bryant wrote on the initial CNIL decision over Google Analytics.