UPDATE on noyb’s 101 complaints: Austrian DPA rejects “risk based approach” for data transfers to third countries

UPDATE on 101 complaints: Austrian DPA rejects “risk based approach” for data transfers to third countries After the groundbreaking decisions by the Austrian and French DPA that the use of Google Analytics is illegal, the Austrian DPA has now issued a second decision, going even further: It declared the use of Google’s IP anonymisation a useless protection measure for data transfers between the EU and the United States. The DSB further rejected the notion of a “risk based approach” that had been argued by Google. Some authorities in Europe have at the same time closed the cases: The Spanish and Luxemburgish DPAs have both closed complaints proceudres without commenting on the unlawful use of Google Analytics, as the relevant website stopped using Google Analytics. Link to English translation of redacted decision Link to redacted German original Link to prior Austrian Decision Link to prior French Decision GDPR doesn’t foresee “risk-based approach” for data transfers. After Schrems II,