Not named in the source

What happened

Following one of noyb's 101 US transfer complaints, the Norwegian DPA has notified a controller of their intent to reprimand their former use of Google Analytics and consequent transfer of personal data to the US in violation of Article 44 GDPR, as they did not have sufficient supplementary measures in place.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 4Definitions4(16)(a) · 4(23)(b)Read →
• Art. 44General principle for transfersRead →
• Art. 46Transfers subject to appropriate safeguards46(2)(c)Read →
• Art. 56Competence of the lead supervisory authority56(1)Read →
• Art. 58Powers58(2)(b)Read →
• Art. 60Cooperation between the lead supervisory authority and the other supervisory authorities concerned60(3)Read →
• Art. 80Representation of data subjects80(1)Read →

• International transfers