[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"blog-slug_blog_3_1":3,"blog-slug_blog_hungarian-dpa-to-rule-against-google-analytics-according-to-gdprtoday_1000_1":40},{"article":4,"articles":15,"meta":33,"languages":39},{"id":5,"title":6,"excerpt":7,"locale":8,"slug":9,"authorSlug":10,"automaticTranslated":11,"publishedAt":12,"updatedAt":13,"doFollowLinks":11,"showIndex":11,"showCallToActions":11,"articleType":14},3060,"The EU wants to kill cookie banners","The EU wants to end annoying cookie pop-ups by letting users set their consent once in their browser. If passed, websites will have to respect those choices.","en","the-eu-wants-to-kill-cookie-banners-by-moving-consent-to-your-browser","iron-brands",false,"2025-11-20T05:40:14.356Z","2025-11-20T06:13:15.812Z","blog",[4,16,26],{"id":17,"title":18,"excerpt":19,"locale":8,"slug":20,"authorSlug":10,"automaticTranslated":11,"publishedAt":21,"updatedAt":22,"ctaTitle":23,"ctaDescription":24,"doFollowLinks":11,"showIndex":25,"showCallToActions":11,"articleType":14},3019,"Google is tracking you (even when you use DuckDuckGo)","Google tracks users even on DuckDuckGo via Analytics and embeds. A new study shows how deep Google’s web tracking really goes.","google-is-tracking-you-even-when-you-use-duck-duck-go","2025-07-14T08:56:41.709Z","2025-07-14T11:26:01.386Z","If you care about privacy, you don't use Google Analytics","Ditch the tracking, keep the insights. Try Simple Analytics.",true,{"id":27,"title":28,"excerpt":29,"locale":8,"slug":30,"authorSlug":10,"automaticTranslated":11,"publishedAt":31,"updatedAt":32,"doFollowLinks":11,"showIndex":11,"showCallToActions":11,"articleType":14},3018," German court rules Meta’s tracking tech violates GDPR","German court rules Meta’s tracking tech violates GDPR, allowing lawsuits without proof of harm. Big risks ahead for sites using Meta pixels.","german-court-rules-meta-s-tracking-tech-violates-gdpr","2025-07-10T08:20:51.111Z","2025-07-10T12:16:26.327Z",{"pagination":34},{"page":35,"pageSize":36,"pageCount":37,"total":38},1,3,362,1084,{},{"article":41},{"contentHtml":42,"question":43,"content":44,"inlineMedia":45,"id":47,"title":48,"excerpt":49,"locale":8,"slug":50,"authorSlug":51,"automaticTranslated":11,"publishedAt":52,"updatedAt":53,"doFollowLinks":11,"showIndex":25,"showCallToActions":25,"articleType":14,"languages":54},"\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"274\">According to the latest edition of noyb's \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://web.archive.org/web/20221102155256/https://noyb.eu/en/gdprtoday?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">GDPRtoday newsletter\u003C/a>, the Hungarian data protection authority may soon join the \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://gdprhub.eu/index.php?title=DSB_%28Austria%29_-_2021-0.586.257_%28D155.027%29&utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">Austrian\u003C/a>, \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://gdprhub.eu/index.php?title=CNIL_%28France%29_-_Google_Analytics_%28no_case_number%29&utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">French\u003C/a>, and \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://gdprhub.eu/index.php?title=Garante_per_la_protezione_dei_dati_personali_%28Italy%29_-_9782890&utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">Italian\u003C/a> DPAs in \u003Cstrong>ruling against the use of Google Analytics\u003C/strong>.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"274\">A \u003Cstrong>disclaimer\u003C/strong> is due here: the decision has not been published yet, and Noyb is a privacy NGO directly involved in the case. We consider the information reliable because we believe noyb has no plausible interest in spreading inaccurate information about the outcome of one of its cases, but some discretion is advised.\u003C/ContentEditable>\n\u003Col class=\"counters\">\u003Cli>\u003CNuxtLink to=\"#the-case\">The case\u003C/NuxtLink>\u003C/li>\u003Cli>\u003CNuxtLink to=\"#the-bigger-picture\">The bigger picture\u003C/NuxtLink>\u003C/li>\u003C/ol>\u003CCtaOne />\u003CContentEditable  id=\"the-case\" parent=\"\" tag=\"h2\" :articleId=\"274\">The case\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"274\">The case is one of \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://noyb.eu/en/101-complaints-eu-us-transfers-filed?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">noyb's 101 complaints\u003C/a>. According to the summary available on the \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://gdprhub.eu/index.php?title=NAIH_%28Hungary%29_-_NAIH-3561-4%2F2022&utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">gpdrhub\u003C/a> (also a noyb project), the decision will closely resemble the ones from the other three DPAs.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"274\">A Hungarian weather forecast website used Google Analytics, which requires transfers of personal data between Google Ireland Ltd. and US-based Google LLC. A data subject, represented by noyb, complained that the transfers of his personal data \u003Cstrong>lacked effective safeguards\u003C/strong> against US surveillance and were therefore \u003Cstrong>unlawful\u003C/strong>. The Hungarian DPA (NAIH) allegedly upheld the claim and ordered the website to cease the use of Google Analytics.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"274\">While the rulings of the Austrian, French and Italian DPAs addressed individual controllers, they set a precedent that practically amounts to a \u003Cstrong>Statewide ban\u003C/strong>. This is because controllers using Google Analytics are not in a position to implement adequate safeguards (more about this \u003CNuxtLink to=\"/blog/how-to-move-forward-with-data-transfers-between-the-eu-us#3-supplementary-measures-for-data-transfers\"  >here\u003C/NuxtLink>). There are good reasons to expect this to be the case for Hungary as well, as DPAs are following a \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://edpb.europa.eu/news/news/2020/european-data-protection-board-thirty-seventh-plenary-session-guidelines-controller_en?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">coordinated approach\u003C/a> in deciding the 101 complaints. So if the information is accurate, the \u003Cstrong>use of Google Analytics may soon be unlawful in Hungary under the GDPR\u003C/strong>.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"274\">As with previous DPA's banning the use of Google Analytis, we've seen some confusion on whether this applies to the current Google Analytics version (universal analytics) or also on the new version (Google Analytics 4). The short answer is that the statements apply to both verions. We've written about this more extensively in \u003CNuxtLink to=\"/blog/is-google-analytics-4-gdpr-compliant\"  >this blog\u003C/NuxtLink>.\u003C/ContentEditable>\n\u003CContentEditable  id=\"the-bigger-picture\" parent=\"\" tag=\"h2\" :articleId=\"274\">The bigger picture\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"274\">US data transfers have been a legal puzzle for companies for a while now. The issues stem from the implications of the 2020 \u003Cstrong>Schrems II case\u003C/strong>. In a nutshell, the Court found that \u003Cstrong>data transfers to the US expose European data to US surveillance\u003C/strong> and ruled that such transfers are unlawful unless controllers implement effective safeguards to protect the data. Unfortunately, this is difficult or impossible in many cases.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"274\">Shortly after Schrems II, noyb filed 101 complaints against Google Analytics and Facebook Connect. All complaints revolve around data transfers and aim to nudge DPAs towards \u003Cstrong>stricter enforcement of the Schrems II ruling\u003C/strong>.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"274\">DPAs coordinated their approach to the complaints at a European level. As a result, three DPAs (the Austrian DSB, the French CNIL, and the Italian \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://gdprhub.eu/index.php?title=Garante_per_la_protezione_dei_dati_personali_%28Italy%29_-_9782890&utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">GPDP\u003C/a> ruled against the use of Google Analytics so far. The Danish Datatilsynet also followed the example by practically declaring use of GA unlawful in a \u003CNuxtLink to=\"/blog/denmark-declares-google-analytics-unlawful\"  >press release\u003C/NuxtLink>. If the latest news is accurate, the Hungarian NAIH will be the fourth DPA to practically ban Google Analytics from its Members State (or the fifth, counting the Datatilsynet).\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"274\">\u003Cstrong>Want to stay up to date?\u003C/strong>: Subscribe to \u003Ca referrerpolicy=\"strict-origin-when-cross-origin\" href=\"https://theprivacynewsletter.com/?utm_source=simpleanalytics.com\" target=\"_blank\" rel=\"noopener nofollow\">theprivacynewsletter.com\u003C/a> to receive the latest news. \u003Cstrong>Looking for a Google Analytcs alternative that does comply with EU law?\u003C/strong> Unlike Google, we believe in creating an independent web that is friendly to website visitors. If this resonates with you, feel free to \u003CNuxtLink to=\"https://simpleanalytics.com/simpleanalytics.com\"  referrerpolicy=\"unsafe-url\" rel=\"\">check us out\u003C/NuxtLink>.\u003C/ContentEditable>\n","Is Google Analytics illegal in Hungary?","According to the latest edition of noyb's [GDPRtoday newsletter](https://web.archive.org/web/20221102155256/https://noyb.eu/en/gdprtoday), the Hungarian data protection authority may soon join the [Austrian](https://gdprhub.eu/index.php?title=DSB_(Austria)_-_2021-0.586.257_(D155.027)), [French](https://gdprhub.eu/index.php?title=CNIL_(France)_-_Google_Analytics_(no_case_number)), and [Italian](https://gdprhub.eu/index.php?title=Garante_per_la_protezione_dei_dati_personali_(Italy)_-_9782890) DPAs in **ruling against the use of Google Analytics**.\n\nA **disclaimer** is due here: the decision has not been published yet, and Noyb is a privacy NGO directly involved in the case. We consider the information reliable because we believe noyb has no plausible interest in spreading inaccurate information about the outcome of one of its cases, but some discretion is advised.\n\n## The case\n\nThe case is one of [noyb's 101 complaints](https://noyb.eu/en/101-complaints-eu-us-transfers-filed). According to the summary available on the [gpdrhub](https://gdprhub.eu/index.php?title=NAIH_(Hungary)_-_NAIH-3561-4/2022) (also a noyb project), the decision will closely resemble the ones from the other three DPAs.\n\nA Hungarian weather forecast website used Google Analytics, which requires transfers of personal data between Google Ireland Ltd. and US-based Google LLC. A data subject, represented by noyb, complained that the transfers of his personal data **lacked effective safeguards** against US surveillance and were therefore **unlawful**. The Hungarian DPA (NAIH) allegedly upheld the claim and ordered the website to cease the use of Google Analytics.\n\nWhile the rulings of the Austrian, French and Italian DPAs addressed individual controllers, they set a precedent that practically amounts to a **Statewide ban**. This is because controllers using Google Analytics are not in a position to implement adequate safeguards (more about this [here](https://www.simpleanalytics.com/blog/how-to-move-forward-with-data-transfers-between-the-eu-us#3-supplementary-measures-for-data-transfers)). There are good reasons to expect this to be the case for Hungary as well, as DPAs are following a [coordinated approach](https://edpb.europa.eu/news/news/2020/european-data-protection-board-thirty-seventh-plenary-session-guidelines-controller_en) in deciding the 101 complaints. So if the information is accurate, the **use of Google Analytics may soon be unlawful in Hungary under the GDPR**.\n\nAs with previous DPA's banning the use of Google Analytis, we've seen some confusion on whether this applies to the current Google Analytics version (universal analytics) or also on the new version (Google Analytics 4). The short answer is that the statements apply to both verions. We've written about this more extensively in [this blog](https://www.simpleanalytics.com/blog/is-google-analytics-4-gdpr-compliant).\n\n## The bigger picture\n\nUS data transfers have been a legal puzzle for companies for a while now. The issues stem from the implications of the 2020 **Schrems II case**. In a nutshell, the Court found that **data transfers to the US expose European data to US surveillance** and ruled that such transfers are unlawful unless controllers implement effective safeguards to protect the data. Unfortunately, this is difficult or impossible in many cases.\n\nShortly after Schrems II, noyb filed 101 complaints against Google Analytics and Facebook Connect. All complaints revolve around data transfers and aim to nudge DPAs towards **stricter enforcement of the Schrems II ruling**.\n\nDPAs coordinated their approach to the complaints at a European level. As a result, three DPAs (the Austrian DSB, the French CNIL, and the Italian [GPDP](https://gdprhub.eu/index.php?title=Garante_per_la_protezione_dei_dati_personali_(Italy)_-_9782890) ruled against the use of Google Analytics so far. The Danish Datatilsynet also followed the example by practically declaring use of GA unlawful in a [press release](https://www.simpleanalytics.com/blog/denmark-declares-google-analytics-unlawful). If the latest news is accurate, the Hungarian NAIH will be the fourth DPA to practically ban Google Analytics from its Members State (or the fifth, counting the Datatilsynet).\n\n**Want to stay up to date?**: Subscribe to [theprivacynewsletter.com](https://theprivacynewsletter.com/) to receive the latest news. **Looking for a Google Analytcs alternative that does comply with EU law?** Unlike Google, we believe in creating an independent web that is friendly to website visitors. If this resonates with you, feel free to [check us out](https://simpleanalytics.com/simpleanalytics.com).",{"data":46},null,274,"Hungarian DPA to rule against Google Analytics, according to GDPRtoday","Hungarian DPA may join the Austrian, French, and Italian DPAs in ruling against the use of Google Analytics","hungarian-dpa-to-rule-against-google-analytics-according-to-gdprtoday","carlo-cilento","2022-11-10T00:00:00.000Z","2023-08-15T11:52:40.561Z",{"en":55,"de":56,"fr":58,"it":60,"es":62,"nl":64},{"slug":50},{"slug":57},"ungarische-datenschutzbehoerde-will-laut-gdp-rtoday-gegen-google-analytics-entscheiden",{"slug":59},"selon-gdp-rtoday-la-dpa-hongroise-se-prononcera-contre-google-analytics",{"slug":61},"la-dpa-ungherese-si-pronuncera-contro-google-analytics-secondo-gdp-rtoday",{"slug":63},"segun-gdp-rtoday-la-apd-hungara-dictara-sentencia-contra-google-analytics",{"slug":65},"hongaarse-dpa-doet-uitspraak-tegen-google-analytics-volgens-gdp-rtoday"]