News · noyb - European Center for Digital Rights EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

UPDATE: CNIL decides EU-US data transfer to Google Analytics illegal

Privacy Shield Supervisory Authorities
Apr 5, 2022 Source noyb.eu

Full text

Data Transfers UPDATE: CNIL orders three controllers to comply with GDPR after decision that using Google Analytics is illegal Only weeks after the groundbreaking decision by the Austrian Data Protection Authority that the continuous use of Google Analytics violates the GDPR, the French Data Protection Authority (CNIL) ordered three French websites to comply with the GDPR. All these decisions are based on noyb's 101 model complaints which were filed after the Court of Justice ruling invalidating Privacy Shield. noyb expects similar decisions by the other authorities. Press Release by CNIL on First Decision Second and Third Decision More information on decision by the Austrian DPA 2020 CJEU ruling hits the real world. In July 2020, the CJEU has issued its groundbreaking "Schrems II" ruling, holding that a transfer to US providers that fall under FISA 702 and EO 12.333 violate the rules on international data transfers in the GDPR. The CJEU consequently annulled the transfer deal "Privacy

How it connects

Related across sources

C-311/18 Data Protection Commissioner v Facebook Ireland and Maximillian Schrems C-311/18 (Schrems II) CJEU Jul 16, 2020 Privacy Shield Processing Agreement International Transfer
C-362/14 Maximillian Schrems v Data Protection Commissioner C-362/14 (Schrems I) CJEU Oct 6, 2015 Privacy Shield Supervision IP Address
2023 Information note on data transfers under the GDPR to the United States after the adoption of the adequacy decision on 10 July 2023 1 Adopted Information note on data transfers under the GDPR to the United States after the adoption of the adequacy decision on 10 July 2023 On 10 July 2023, the European… EDPB Jul 18, 2023 Privacy Shield International Transfer Processing Agreement
2024 Information Note on the Data Privacy Framework redress mechanism for national security purposes 1 Information Note on the redress mechanism for EU/EEA individuals in relation to alleged violations of U.S. law with respect to their data collected by U.S authorities competent… EDPB Apr 24, 2024 Privacy Shield International Transfer Personal Data
Data Protection Commissioner v. Facebook Ireland Ltd, and Maximillian Schrems Schrems II CJEU Jul 16, 2020 Supervision Supervisory Authorities Personal Data
HvJ EU 9 januari 2025, C‑394/23 (Mousse) Artikelen: 5(1)(c), 6(1), en 21 AVG Onderwerp : Beginsel van minimale gegevensverwerking Gek genoeg verwijst het HvJ EU zelf niet naar HvJ EU 1 augustus 2022, C‑184/20… HvJ EU 9 januari 2025, C‑394/23 (Mousse). ·CJEU Jan 9, 2025 IP Address Retention Period Identification
Related documents