Finland's Office of the Data Protection Ombudsman ordered the Finnish Meteorological Institute to halt EU-U.S. data transfers using Google Analytics and Google's reCAPTCHA. The ombudsman ruled the institute had no legal basis for processing to facilitate data flows and continued transfers based on cookie consent despite the invalidation of the EU-U.S. Privacy Shield by the Court of Justice of the European Union in July 2020. The institute has removed the Google tools from its website and was ordered to delete all data that had been transferred without legal basis.
Finland's DPA issues Google Analytics data transfers decision
Related stories
Notes from the IAPP Canada: Regulators should better understand data breach complexities
Ontario's IPC works toward balancing youth safeguards, empowerment
A view from DC: Pride, coded language and the tragic irony of a private life
UK Parliament advances Data (Use and Access) Bill, awaits Royal Assent
A view from Brussels: Is Europe ramping up its agenda on protecting children online?