[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"blog-slug_blog_3_1":3,"blog-slug_blog_eu-moving-closer-to-facebook-ban_1000_1":40},{"article":4,"articles":15,"meta":33,"languages":39},{"id":5,"title":6,"excerpt":7,"locale":8,"slug":9,"authorSlug":10,"automaticTranslated":11,"publishedAt":12,"updatedAt":13,"doFollowLinks":11,"showIndex":11,"showCallToActions":11,"articleType":14},3060,"The EU wants to kill cookie banners","The EU wants to end annoying cookie pop-ups by letting users set their consent once in their browser. If passed, websites will have to respect those choices.","en","the-eu-wants-to-kill-cookie-banners-by-moving-consent-to-your-browser","iron-brands",false,"2025-11-20T05:40:14.356Z","2025-11-20T06:13:15.812Z","blog",[4,16,26],{"id":17,"title":18,"excerpt":19,"locale":8,"slug":20,"authorSlug":10,"automaticTranslated":11,"publishedAt":21,"updatedAt":22,"ctaTitle":23,"ctaDescription":24,"doFollowLinks":11,"showIndex":25,"showCallToActions":11,"articleType":14},3019,"Google is tracking you (even when you use DuckDuckGo)","Google tracks users even on DuckDuckGo via Analytics and embeds. A new study shows how deep Google’s web tracking really goes.","google-is-tracking-you-even-when-you-use-duck-duck-go","2025-07-14T08:56:41.709Z","2025-07-14T11:26:01.386Z","If you care about privacy, you don't use Google Analytics","Ditch the tracking, keep the insights. Try Simple Analytics.",true,{"id":27,"title":28,"excerpt":29,"locale":8,"slug":30,"authorSlug":10,"automaticTranslated":11,"publishedAt":31,"updatedAt":32,"doFollowLinks":11,"showIndex":11,"showCallToActions":11,"articleType":14},3018," German court rules Meta’s tracking tech violates GDPR","German court rules Meta’s tracking tech violates GDPR, allowing lawsuits without proof of harm. Big risks ahead for sites using Meta pixels.","german-court-rules-meta-s-tracking-tech-violates-gdpr","2025-07-10T08:20:51.111Z","2025-07-10T12:16:26.327Z",{"pagination":34},{"page":35,"pageSize":36,"pageCount":37,"total":38},1,3,362,1084,{},{"article":41},{"contentHtml":42,"question":43,"content":44,"coverImageWithoutText":45,"inlineMedia":53,"id":162,"title":163,"excerpt":164,"locale":8,"slug":165,"authorSlug":166,"automaticTranslated":11,"publishedAt":167,"updatedAt":168,"doFollowLinks":11,"showIndex":25,"showCallToActions":25,"articleType":14,"cover":45,"languages":169},"\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">On Thursday, the Irish data protection authority (DPC) announced that they might stop data transfers between Meta Platforms Ireland and its US parent company, \u003Cstrong>effectively shutting down Facebook in Europe\u003C/strong>.\u003C/ContentEditable>\n\u003Cdetails markdown=\"1\">\n\u003CContentEditable  parent=\"\" tag=\"summary\" :articleId=\"292\">Read the full statement here by Politico.eu who were the first to report\u003C/ContentEditable>\n\n\u003Cblockquote>\n\u003Cp>At July 7, 2022 12:37 PM CET by Vincent Manancourt.\u003C/p>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">Europeans risk seeing social media services Facebook and Instagram shut down this summer, as Ireland's privacy regulator doubled down on its order to stop the firm's data flows to the United States.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">The Irish Data Protection Commission on Thursday informed its counterparts in Europe that it will block Facebook-owner Meta from sending user data from Europe to the U.S. The Irish regulator's draft decision cracks down on Meta's last legal resort to transfer large chunks of data to the U.S., after years of fierce court battles between the U.S. tech giant and European privacy activists.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">The European Court of Justice in 2020 \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://curia.europa.eu/juris/fiche.jsf?id=C%3B311%3B18%3BRP%3B1%3BP%3B1%3BC2018%2F0311%2FJ&utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">annulled\u003C/a> an EU-U.S. data flows pact called Privacy Shield because of fears over U.S. surveillance practices. In its ruling, it also made it harder to use another legal tool that Meta and many other U.S. firms use to transfer personal data to the U.S., called standard contractual clauses (SCCs). This week's decision out of Ireland means Facebook is forced to stop relying on SCCs too.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">Meta has repeatedly warned that such a decision would shutter many of its services in Europe, including Facebook and Instagram.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">"If a new transatlantic data transfer framework is not adopted and we are unable to continue to rely on SCCs or rely upon other alternative means of data transfers from Europe to the United States, we will likely be unable to offer a number of our most significant products and services, including Facebook and Instagram, in Europe," Meta \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://d18rn0p25nwr6d.cloudfront.net/CIK-0001326801/c07375c5-b2dc-4223-8166-3365a3a1dbfd.pdf?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">said in a filing to the U.S. Securities and Exchange Commission in March\u003C/a> this year.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">The Irish blocking order, if confirmed by the \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://edpb.europa.eu/edpb_en?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">group of European national data protection regulators\u003C/a>, is likely to send a chill through the wider business community too, which has been scratching its head about how to continue sending data from Europe to the U.S. following the EU's top court ruling in 2020.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">The EU and U.S. are in the midst of negotiating a new data-transfer text that would allow companies like Meta to continue to ship data across the Atlantic irrespective of the Irish order. Brussels and Washington \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://www.politico.eu/article/eu-us-strike-preliminary-deal-to-unlock-transatlantic-data-flows/?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">in March agreed to a preliminary deal at the political level\u003C/a>, but negotiations on the legal fine print have stalled and a final deal is unlikely to be reached before the end of the year.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">A spokesperson for the Irish DPC confirmed that the draft decision had been sent to other European privacy regulators, who now have a month to give their input, but wouldn't discuss details of the decision.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">"This draft decision, which is subject to review by European Data Protection Authorities, relates to a conflict of EU and U.S. law which is in the process of being resolved," a Meta spokesperson said. "We welcome the EU-U.S. agreement for a new legal framework that will allow the continued transfer of data across borders, and we expect this framework will allow us to keep families, communities and economies connected."\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">View source at \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://www.politico.eu/article/europe-faces-facebook-blackout-instagram-meta-data-protection/amp/?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">politico.eu\u003C/a>.\u003C/ContentEditable>\n\u003C/blockquote>\n\u003C/details>\n\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">The DPC drafted a decision to shut down Meta's data transfers for Facebook and submitted it to the European Data Protection Board Data protection agencies from other EU Member States have a month to add their views and objections before it moves forward, but the process will likely take longer. The move could mean the biggest disruption of the social media giant in its history. The DPC did not disclose the contents of the draft.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">Earlier this year, Facebook stated that if it's unable to transfer data overseas, it could affect the availability of its products. This scenario now seems close to becoming a reality now.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">\u003Cem>(Update: the EDPB got directly involved in the case. In the end, Meta was fined for a record €1.2 billion and ordered to suspend US data transfers for Facebook. The terms for the suspension order is pending and the risk of a Facebook blackout is more real than ever. We wrote about this decision \u003CNuxtLink to=\"/blog/meta-hit-with-record-breaking-1-3-billion-fine-over-facebook-data-transfers-to-the-us\"  >in depth\u003C/NuxtLink>)\u003C/em>\u003C/ContentEditable>\n\u003CGif :width=\"750\" :height=\"422\" poster=\"https://cms-assets.simpleanalytics.com/damn_791d66341a-medium-poster.webp\" background=\"594542\" src=\"https://cms-assets.simpleanalytics.com/damn_791d66341a-medium-animated.webp\" />\n\n\u003Col class=\"counters\">\u003Cli>\u003CNuxtLink to=\"#facebook-and-schrems-a-long-story\">Facebook and Schrems. A long Story\u003C/NuxtLink>\u003C/li>\u003Cli>\u003CNuxtLink to=\"#crackdown-on-google-analytics\">Crackdown on Google Analytics\u003C/NuxtLink>\u003C/li>\u003Cli>\u003CNuxtLink to=\"#privacy-shield-20\">Privacy Shield 2.0\u003C/NuxtLink>\u003C/li>\u003Cli>\u003CNuxtLink to=\"#implications-of-facebook-ban\">Implications of Facebook ban\u003C/NuxtLink>\u003C/li>\u003Cli>\u003CNuxtLink to=\"#final-thoughts\">Final thoughts\u003C/NuxtLink>\u003C/li>\u003C/ol>\u003CCtaOne />\n\u003CContentEditable  id=\"facebook-and-schrems-a-long-story\" parent=\"\" tag=\"h2\" :articleId=\"292\">Facebook and Schrems. A long Story\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">The draft decision is the result of a long and complex legal battle between Max Schrems and Facebook. Nine years ago, privacy activist Max Schrems filed a complaint about Facebook’s data transfers before the DPC, citing privacy concerns in the wake of the Snowden revelations. The case ended up in the EU Court of Justice twice, and the Court invalidated two EU-US \u003Cstrong>data transfers frameworks\u003C/strong> in the landmark Schrems I and II cases.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">Schrems II made US data transfers tricky, as the Court highlighted the need to \u003Cstrong>implement effective safeguards against US surveillance\u003C/strong>- which is hard and often impossible for European companies.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">Under US surveillance law, Facebook qualifies as an “Electronic communication service provider” and is therefore obliged to share data with the US intelligence service if requested. This means that US agencies can access the personal data of EU citizens.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">The mandate of the GDPR is simple: protecting the privacy of European data. This cannot be guaranteed when personal data is sent from the EU to Facebook servers in the US.\u003C/ContentEditable>\n\u003Cp>\u003Cimg src=\"https://cms-assets.simpleanalytics.com/burning_facebook_flag_87c206bfa2.png\" alt=\"burning-facebook-flag.png\">\u003C/p>\n\u003CContentEditable  id=\"crackdown-on-google-analytics\" parent=\"\" tag=\"h2\" :articleId=\"292\">Crackdown on Google Analytics\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">The Schrems II ruling did not lead to a response from data protection authorities until the beginning of this year, when the \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://noyb.eu/en/austrian-dsb-eu-us-data-transfers-google-analytics-illegal?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">DSB (Austria)\u003C/a> responded by banning the use of Google Analytics. \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://www.cnil.fr/en/?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">CNIL (France)\u003C/a> was quick to follow, and \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://www.gpdp.it/web/guest/home/docweb/-/docweb-display/docweb/9782874?utm_source=simpleanalytics.com#english\" target=\"_blank\" rel=\"noopener nofollow\">Garante (Italy)\u003C/a> banned Google Analytics last week as well. More EU member states are likely to follow suit in the coming months.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">\u003Cem>(Update: \u003CNuxtLink to=\"/blog/finland-is-latest-eu-country-to-crack-down-on-google-analytics\"  >Finland\u003C/NuxtLink> and \u003CNuxtLink to=\"/blog/norway-takes-a-stance-against-google-analytics\"  >Norway\u003C/NuxtLink> ruled against Google Analytics- although the Norwegian authority's findings are yet preliminary. Additionally, Denmark essentially embraced the same stance in a \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://www.datatilsynet.dk/english/google-analytics/use-of-google-analytics-for-web-analytics?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">press release\u003C/a>.\u003C/em>\u003C/ContentEditable>\n\u003CContentEditable  id=\"privacy-shield-20\" parent=\"\" tag=\"h2\" :articleId=\"292\">Privacy Shield 2.0\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">A Facebook spokesperson noted that the issue is in the process of being resolved, referring to a new agreement between the U.S and the EU that will allow the continued transfer of data. The so-called Privacy Shield 2.0. However, the deal is far from finalized. Both the EU (\u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://ec.europa.eu/commission/presscorner/detail/en/STATEMENT_21_1443?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">here\u003C/a>) and the US (\u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://www.whitehouse.gov/briefing-room/speeches-remarks/2022/03/25/remarks-by-president-biden-and-european-commission-president-ursula-von-der-leyen-in-joint-press-statement/?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">here\u003C/a>) announced a new agreement on a new framework for transatlantic data transfer, but no legal document has been provided.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">Max Schrems (yup, the one from the rulings) \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://noyb.eu/en/privacy-shield-20-first-reaction-max-schrems?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">noted\u003C/a>:\u003C/ContentEditable>\n\u003Cblockquote>\u003CContentEditable  parent=\"blockquote\" tag=\"p\" :articleId=\"292\">“The final text will need more time; once this arrives, we will analyze it in-depth, together with our US legal experts. If it is not in line with EU law, we or another group will likely challenge it. In the end, the Court of Justice will decide a third time. We expect this to be back at the Court within months from a final decision.”\u003C/ContentEditable>\u003C/blockquote>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">\u003Cem>Update: the new framework for EU-US data transfers is on the way. US President Joe Biden signed an \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://www.whitehouse.gov/briefing-room/statements-releases/2022/10/07/fact-sheet-president-biden-signs-executive-order-to-implement-the-european-union-u-s-data-privacy-framework/?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">executive order\u003C/a> in October 2022 and the European Commission published a [draft adequacy decision] for the US two months later. Together, these two acts are meant to be the foundation for the Trans Atlantic Data Privacy Framework.\u003C/em>\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">\u003Cem>The new framework is still problematic in some respects and will surely face challenges in Court. It was also met with \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://www.europarl.europa.eu/news/en/press-room/20230505IPR85012/meps-against-greenlighting-personal-data-transfers-with-the-u-s?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">opposition from the EU Parliament\u003C/a>. We are looking at yet another Schrems ruling and it’s hard to say how it will play out.\u003C/em>\u003C/ContentEditable>\n\u003Cp>\u003Cimg src=\"https://assets.simpleanalytics.com/blog/2022-eu-moving-closer-to-facebook-ban/social-image-no-text.png\" alt=\"EU bans facebook\">\u003C/p>\n\u003CContentEditable  id=\"implications-of-facebook-ban\" parent=\"\" tag=\"h2\" :articleId=\"292\">Implications of Facebook ban\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">An unresolved conflict about transatlantic data transfer could have a significant impact on (almost) all Europeans. It sounds unrealistic that Facebook would not be available for EU citizens, but this might very well become a reality.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">In February, \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://www.reuters.com/technology/irish-regulator-moves-closer-possible-ban-facebook-instagram-eu-us-data-flows-2022-07-07/?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">DPC head Helen Dixon told Reuters\u003C/a> that a decision would not immediately affect WhatsApp as it has a different data controller.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">It sounds harsh, but finally, the GDPR is showing its teeth. Privacy is a human right and should be treated as such. Google and Facebook have become the biggest monopolies companies in the world by monetizing our data. This model is showing cracks as more and more consumers are demanding privacy.\u003C/ContentEditable>\n\u003CContentEditable  id=\"final-thoughts\" parent=\"\" tag=\"h2\" :articleId=\"292\">Final thoughts\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">We started Simple Analytics because we care about privacy. Our "fight" is mainly with Google as Simple Analytics is a privacy-first \u003CNuxtLink to=\"/\"  >Google Analytics alternative\u003C/NuxtLink>, but it goes further than that. We believe in an independent web that is friendly to website visitors.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">To create a more open web, we need to adopt a different mindset. We must find ways to stop relying on the biggest advertising companies in the world. We really need to figure out how to become independent from those data-devouring beasts.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"292\">To change this, we need alternatives that allow us to do so. And yes, we are biased because we built a privacy-first Google Analytics alternative. But if this message resonates with you, you should check out all these \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://european-alternatives.eu/?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">EU-based alternatives for digital products\u003C/a> and see for yourself.\u003C/ContentEditable>\n","Will the EU ban Facebook?","On Thursday, the Irish data protection authority (DPC) announced that they might stop data transfers between Meta Platforms Ireland and its US parent company, **effectively shutting down Facebook in Europe**.\n\n\u003Cdetails markdown=\"1\">\n\u003Csummary>Read the full statement here by Politico.eu who were the first to report\u003C/summary>\n\n> At July 7, 2022 12:37 PM CET by Vincent Manancourt.\n>\n> Europeans risk seeing social media services Facebook and Instagram shut down this summer, as Ireland's privacy regulator doubled down on its order to stop the firm's data flows to the United States.\n>\n> The Irish Data Protection Commission on Thursday informed its counterparts in Europe that it will block Facebook-owner Meta from sending user data from Europe to the U.S. The Irish regulator's draft decision cracks down on Meta's last legal resort to transfer large chunks of data to the U.S., after years of fierce court battles between the U.S. tech giant and European privacy activists.\n>\n> The European Court of Justice in 2020 [annulled](https://curia.europa.eu/juris/fiche.jsf?id=C%3B311%3B18%3BRP%3B1%3BP%3B1%3BC2018%2F0311%2FJ) an EU-U.S. data flows pact called Privacy Shield because of fears over U.S. surveillance practices. In its ruling, it also made it harder to use another legal tool that Meta and many other U.S. firms use to transfer personal data to the U.S., called standard contractual clauses (SCCs). This week's decision out of Ireland means Facebook is forced to stop relying on SCCs too.\n>\n> Meta has repeatedly warned that such a decision would shutter many of its services in Europe, including Facebook and Instagram.\n>\n> \"If a new transatlantic data transfer framework is not adopted and we are unable to continue to rely on SCCs or rely upon other alternative means of data transfers from Europe to the United States, we will likely be unable to offer a number of our most significant products and services, including Facebook and Instagram, in Europe,\" Meta [said in a filing to the U.S. Securities and Exchange Commission in March](https://d18rn0p25nwr6d.cloudfront.net/CIK-0001326801/c07375c5-b2dc-4223-8166-3365a3a1dbfd.pdf) this year.\n>\n> The Irish blocking order, if confirmed by the [group of European national data protection regulators](https://edpb.europa.eu/edpb_en), is likely to send a chill through the wider business community too, which has been scratching its head about how to continue sending data from Europe to the U.S. following the EU's top court ruling in 2020.\n>\n> The EU and U.S. are in the midst of negotiating a new data-transfer text that would allow companies like Meta to continue to ship data across the Atlantic irrespective of the Irish order. Brussels and Washington [in March agreed to a preliminary deal at the political level](https://www.politico.eu/article/eu-us-strike-preliminary-deal-to-unlock-transatlantic-data-flows/), but negotiations on the legal fine print have stalled and a final deal is unlikely to be reached before the end of the year.\n>\n> A spokesperson for the Irish DPC confirmed that the draft decision had been sent to other European privacy regulators, who now have a month to give their input, but wouldn't discuss details of the decision.\n>\n> \"This draft decision, which is subject to review by European Data Protection Authorities, relates to a conflict of EU and U.S. law which is in the process of being resolved,\" a Meta spokesperson said. \"We welcome the EU-U.S. agreement for a new legal framework that will allow the continued transfer of data across borders, and we expect this framework will allow us to keep families, communities and economies connected.\"\n>\n> View source at [politico.eu](https://www.politico.eu/article/europe-faces-facebook-blackout-instagram-meta-data-protection/amp/).\n\n\u003C/details>\n\nThe DPC drafted a decision to shut down Meta's data transfers for Facebook and submitted it to the European Data Protection Board Data protection agencies from other EU Member States have a month to add their views and objections before it moves forward, but the process will likely take longer. The move could mean the biggest disruption of the social media giant in its history. The DPC did not disclose the contents of the draft.\n\nEarlier this year, Facebook stated that if it's unable to transfer data overseas, it could affect the availability of its products. This scenario now seems close to becoming a reality now.\n\n_(Update: the EDPB got directly involved in the case. In the end, Meta was fined for a record €1.2 billion and ordered to suspend US data transfers for Facebook. The terms for the suspension order is pending and the risk of a Facebook blackout is more real than ever. We wrote about this decision [in depth](https://www.simpleanalytics.com/blog/meta-hit-with-record-breaking-1-3-billion-fine-over-facebook-data-transfers-to-the-us))_\n\n![damn.gif](https://cms-assets.simpleanalytics.com/damn_791d66341a.gif)\n\n{{tableofcontents}}\n\n## Facebook and Schrems. A long Story\n\nThe draft decision is the result of a long and complex legal battle between Max Schrems and Facebook. Nine years ago, privacy activist Max Schrems filed a complaint about Facebook’s data transfers before the DPC, citing privacy concerns in the wake of the Snowden revelations. The case ended up in the EU Court of Justice twice, and the Court invalidated two EU-US **data transfers frameworks** in the landmark Schrems I and II cases.\n\nSchrems II made US data transfers tricky, as the Court highlighted the need to **implement effective safeguards against US surveillance**\\- which is hard and often impossible for European companies.\n\nUnder US surveillance law, Facebook qualifies as an “Electronic communication service provider” and is therefore obliged to share data with the US intelligence service if requested. This means that US agencies can access the personal data of EU citizens.\n\nThe mandate of the GDPR is simple: protecting the privacy of European data. This cannot be guaranteed when personal data is sent from the EU to Facebook servers in the US.\n\n![burning-facebook-flag.png](https://cms-assets.simpleanalytics.com/burning_facebook_flag_87c206bfa2.png)\n\n## Crackdown on Google Analytics \n\nThe Schrems II ruling did not lead to a response from data protection authorities until the beginning of this year, when the [DSB (Austria)](https://noyb.eu/en/austrian-dsb-eu-us-data-transfers-google-analytics-illegal) responded by banning the use of Google Analytics. [CNIL (France)](https://www.cnil.fr/en/) was quick to follow, and [Garante (Italy)](https://www.gpdp.it/web/guest/home/docweb/-/docweb-display/docweb/9782874#english) banned Google Analytics last week as well. More EU member states are likely to follow suit in the coming months.\n\n_(Update: [Finland](https://www.simpleanalytics.com/blog/finland-is-latest-eu-country-to-crack-down-on-google-analytics) and [Norway](https://www.simpleanalytics.com/blog/norway-takes-a-stance-against-google-analytics) ruled against Google Analytics- although the Norwegian authority's findings are yet preliminary. Additionally, Denmark essentially embraced the same stance in a [press release](https://www.datatilsynet.dk/english/google-analytics/use-of-google-analytics-for-web-analytics)._\n\n## Privacy Shield 2.0\n\nA Facebook spokesperson noted that the issue is in the process of being resolved, referring to a new agreement between the U.S and the EU that will allow the continued transfer of data. The so-called Privacy Shield 2.0. However, the deal is far from finalized. Both the EU ([here](https://ec.europa.eu/commission/presscorner/detail/en/STATEMENT_21_1443)) and the US ([here](https://www.whitehouse.gov/briefing-room/speeches-remarks/2022/03/25/remarks-by-president-biden-and-european-commission-president-ursula-von-der-leyen-in-joint-press-statement/)) announced a new agreement on a new framework for transatlantic data transfer, but no legal document has been provided.\n\nMax Schrems (yup, the one from the rulings) [noted](https://noyb.eu/en/privacy-shield-20-first-reaction-max-schrems):\n\n> “The final text will need more time; once this arrives, we will analyze it in-depth, together with our US legal experts. If it is not in line with EU law, we or another group will likely challenge it. In the end, the Court of Justice will decide a third time. We expect this to be back at the Court within months from a final decision.”\n\n_Update: the new framework for EU-US data transfers is on the way. US President Joe Biden signed an [executive order](https://www.whitehouse.gov/briefing-room/statements-releases/2022/10/07/fact-sheet-president-biden-signs-executive-order-to-implement-the-european-union-u-s-data-privacy-framework/) in October 2022 and the European Commission published a [draft adequacy decision] for the US two months later. Together, these two acts are meant to be the foundation for the Trans Atlantic Data Privacy Framework._\n\n_The new framework is still problematic in some respects and will surely face challenges in Court. It was also met with [opposition from the EU Parliament](https://www.europarl.europa.eu/news/en/press-room/20230505IPR85012/meps-against-greenlighting-personal-data-transfers-with-the-u-s). We are looking at yet another Schrems ruling and it’s hard to say how it will play out._\n\n![EU bans facebook](https://assets.simpleanalytics.com/blog/2022-eu-moving-closer-to-facebook-ban/social-image-no-text.png)\n\n## Implications of Facebook ban\n\nAn unresolved conflict about transatlantic data transfer could have a significant impact on (almost) all Europeans. It sounds unrealistic that Facebook would not be available for EU citizens, but this might very well become a reality.\n\nIn February, [DPC head Helen Dixon told Reuters](https://www.reuters.com/technology/irish-regulator-moves-closer-possible-ban-facebook-instagram-eu-us-data-flows-2022-07-07/) that a decision would not immediately affect WhatsApp as it has a different data controller.\n\nIt sounds harsh, but finally, the GDPR is showing its teeth. Privacy is a human right and should be treated as such. Google and Facebook have become the biggest monopolies companies in the world by monetizing our data. This model is showing cracks as more and more consumers are demanding privacy.\n\n## Final thoughts\n\nWe started Simple Analytics because we care about privacy. Our \"fight\" is mainly with Google as Simple Analytics is a privacy-first [Google Analytics alternative](/blog/why-simple-analytics-is-a-great-alternative-to-google-analytics), but it goes further than that. We believe in an independent web that is friendly to website visitors.\n\nTo create a more open web, we need to adopt a different mindset. We must find ways to stop relying on the biggest advertising companies in the world. We really need to figure out how to become independent from those data-devouring beasts.\n\nTo change this, we need alternatives that allow us to do so. And yes, we are biased because we built a privacy-first Google Analytics alternative. But if this message resonates with you, you should check out all these [EU-based alternatives for digital products](https://european-alternatives.eu/) and see for yourself.\n",{"alt":46,"caption":47,"small":48,"medium":49,"large":50,"original":51,"averageColorHex":52,"isDark":25},"Burning Facebook Flag.png",null,"https://cms-assets.simpleanalytics.com/small_burning_facebook_flag_87c206bfa2.png","https://cms-assets.simpleanalytics.com/medium_burning_facebook_flag_87c206bfa2.png","https://cms-assets.simpleanalytics.com/large_burning_facebook_flag_87c206bfa2.png","https://cms-assets.simpleanalytics.com/burning_facebook_flag_87c206bfa2.png","40363c",{"data":54},[55,103],{"id":56,"attributes":57},121,{"name":58,"alternativeText":59,"caption":47,"width":60,"height":61,"url":62,"formats":47,"mime":63,"provider_metadata":64},"damn.gif","Daaaaamn",480,270,"https://cms-assets.simpleanalytics.com/damn_791d66341a.gif","image/gif",{"meta":65,"formats":70,"processed":25},{"isOpaque":25,"averageColorHex":66,"dominantColorHex":67,"averageColorBrightness":68,"dominantColorBrightness":69},"594542","181808",73,23,{"medium":71,"xlarge":87},{"gif":72,"webp":75,"width":78,"height":79,"poster":80},{"url":73,"size":74},"https://cms-assets.simpleanalytics.com/damn_791d66341a-medium-animated.gif",8488.74,{"url":76,"size":77},"https://cms-assets.simpleanalytics.com/damn_791d66341a-medium-animated.webp",1900.81,750,422,{"png":81,"webp":84},{"url":82,"size":83},"https://cms-assets.simpleanalytics.com/damn_791d66341a-medium-poster.png",759.92,{"url":85,"size":86},"https://cms-assets.simpleanalytics.com/damn_791d66341a-medium-poster.webp",24.85,{"gif":88,"webp":91,"width":94,"height":95,"poster":96},{"url":89,"size":90},"https://cms-assets.simpleanalytics.com/damn_791d66341a-xlarge-animated.gif",24750.1,{"url":92,"size":93},"https://cms-assets.simpleanalytics.com/damn_791d66341a-xlarge-animated.webp",4098.95,1400,788,{"png":97,"webp":100},{"url":98,"size":99},"https://cms-assets.simpleanalytics.com/damn_791d66341a-xlarge-poster.png",2453.8,{"url":101,"size":102},"https://cms-assets.simpleanalytics.com/damn_791d66341a-xlarge-poster.webp",53.12,{"id":104,"attributes":105},120,{"name":106,"alternativeText":47,"caption":47,"width":107,"height":108,"url":51,"formats":109,"mime":113,"provider_metadata":160},"burning-facebook-flag.png",1024,575,{"large":110,"small":124,"medium":132,"xsmall":139,"thumbnail":149},{"ext":111,"url":50,"hash":112,"mime":113,"name":114,"path":47,"size":115,"width":116,"height":117,"provider_metadata":118},".png","large_burning_facebook_flag_87c206bfa2","image/png","large_burning-facebook-flag.png",915.2,1000,562,{"meta":119},{"page":120,"isOpaque":25,"averageColorHex":52,"dominantColorHex":121,"averageColorBrightness":122,"dominantColorBrightness":123},0,"181828",57,25,{"ext":111,"url":48,"hash":125,"mime":113,"name":126,"path":47,"size":127,"width":128,"height":129,"provider_metadata":130},"small_burning_facebook_flag_87c206bfa2","small_burning-facebook-flag.png",248.92,500,281,{"meta":131},{"page":120,"isOpaque":25,"averageColorHex":52,"dominantColorHex":121,"averageColorBrightness":122,"dominantColorBrightness":123},{"ext":111,"url":49,"hash":133,"mime":113,"name":134,"path":47,"size":135,"width":78,"height":136,"provider_metadata":137},"medium_burning_facebook_flag_87c206bfa2","medium_burning-facebook-flag.png",545.45,421,{"meta":138},{"page":120,"isOpaque":25,"averageColorHex":52,"dominantColorHex":121,"averageColorBrightness":122,"dominantColorBrightness":123},{"ext":111,"url":140,"hash":141,"mime":113,"name":142,"path":47,"size":143,"width":144,"height":145,"provider_metadata":146},"https://cms-assets.simpleanalytics.com/xsmall_burning_facebook_flag_87c206bfa2.png","xsmall_burning_facebook_flag_87c206bfa2","xsmall_burning-facebook-flag.png",5.24,64,36,{"meta":147},{"page":120,"isOpaque":25,"averageColorHex":148,"dominantColorHex":121,"averageColorBrightness":122,"dominantColorBrightness":123},"41363c",{"ext":111,"url":150,"hash":151,"mime":113,"name":152,"path":47,"size":153,"width":154,"height":155,"provider_metadata":156},"https://cms-assets.simpleanalytics.com/thumbnail_burning_facebook_flag_87c206bfa2.png","thumbnail_burning_facebook_flag_87c206bfa2","thumbnail_burning-facebook-flag.png",64.58,245,138,{"meta":157},{"page":120,"isOpaque":25,"averageColorHex":158,"dominantColorHex":121,"averageColorBrightness":159,"dominantColorBrightness":123},"41363d",58,{"meta":161},{"page":120,"isOpaque":25,"averageColorHex":52,"dominantColorHex":121,"averageColorBrightness":122,"dominantColorBrightness":123},292,"EU moving closer to Facebook ban","The Irish DPC concluded that it will block Facebook from sending data form the EU to the US","eu-moving-closer-to-facebook-ban","carlo-cilento","2022-07-07T00:00:00.000Z","2023-08-15T11:53:06.767Z",{"en":170,"de":171,"fr":173,"it":175,"es":177,"nl":179},{"slug":165},{"slug":172},"eu-naehert-sich-dem-facebook-verbot",{"slug":174},"l-ue-se-rapproche-d-une-interdiction-de-facebook",{"slug":176},"l-ue-si-avvicina-al-divieto-di-facebook",{"slug":178},"la-ue-se-acerca-a-la-prohibicion-de-facebook",{"slug":180},"eu-komt-dichter-bij-facebook-verbod"]