Finland's Office of the Data Protection Ombudsman ordered the Finnish Meteorological Institute to halt EU-U.S. data transfers using Google Analytics and Google's reCAPTCHA. The ombudsman ruled the institute had no legal basis for processing to facilitate data flows and continued transfers based on cookie consent despite the invalidation of the EU-U.S. Privacy Shield by the Court of Justice of the European Union in July 2020. The institute has removed the Google tools from its website and was ordered to delete all data that had been transferred without legal basis.
Finland's DPA issues Google Analytics data transfers decision
Related stories
Notes from the IAPP Europe: Wrapping up November with the IAPP DPC
Ireland's DPC details legitimate interest prong of its LinkedIn enforcement action
What the new European Commission could mean for digital regulation
IAPP DPC 2024: Reynders discusses GDPR enforcement harmonization, adequacy developments
US Senate subcommittee ponders accountability for AI-assisted scams