IMY Orders CDON, Coop, Dagens Industri, and Tele2 to Stop Using Google Analytics

On 30 June 2023, the Swedish Data Protection Authority (“IMY”) orders CDON, Coop, Dagens Industri, and Tele2 to stop using Google Analytics due to complaints from the o None of Your Business (“NOYB”) in the light of the Schrems II ruling by the European Court of Justice (“CJEU”). The complaints allege that the companies, in violation of the law, transfer personal data to the United States.

IMY has audited how four companies transfer personal data to the US via Google Analytics which is a tool that collects data from your websites and apps to create reports that provide insights into your business. The audits concern a version of Google Analytics from the 14th of August 2020.

In its audits, IMY considers that the data transferred to the US via Google's statistics tool is personal data because the data can be linked with other unique data that is transferred. The authority also concludes that the technical security measures that the companies have taken are not sufficient to ensure a level of protection that essentially corresponds to that guaranteed within the EU/EEA.

In conclusion, from IMY’s audits, it appears that none of the company’s additional technical security measures are sufficient. IMY issues an administrative fine of 12 million SEK against Tele2 and 300,000 SEK against CDON for not taking the same extensive protective technical supplementary measures as Coop and Dagens Industri.

Thusly, Tele2 has recently stopped using the statistics tool on its own initiative. IMY continues to order the other three companies to stop using the tool.

You can access the full text of the news here.

Kind regards,

Zumbul Attorneys-at-Law

info@zumbul.av.tr