Google LLC – Complaint Upheld (Cyprus, 2024)
Google faced a complaint upheld by the DPA Commissioner for transferring personal data to the USA without proper consent. The investigation revealed that Google Analytics was tracking users without asking for permission. This ruling reminds website operators to ensure they have valid consent for using tracking tools.
What happened
Google was found to have transferred personal data to the USA using Google Analytics without obtaining user consent.
Who was affected
Users whose data was tracked by Google Analytics on websites were affected.
What the authority found
The DPA Commissioner ruled that Google lacked a valid legal basis for processing personal data under GDPR.
Why this matters
This decision highlights the need for companies to obtain clear consent before using tracking technologies. It sets a precedent for stricter enforcement of privacy regulations regarding data transfers.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Entities Involved
Source checks
Linked-source text retrieved.
Automated check recorded — 19 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Google Analytics was used to transfer personal data to the USA without obtaining prior user consent, violating third-party cookie consent requirements.
Outcome
Complaint Upheld
A data subject complaint that was upheld by the DPA.
Violations (1)
Third-party tracking cookies or scripts are loaded without obtaining prior user consent.
Art. 13, 14 GDPR
Related Enforcement Actions (0)
No other enforcement actions found for Google LLC in CY
This is the only recorded action for this entity in this jurisdiction.
Similar Cases
Enforcement actions with similar violations
Details
Decision Date
28 February 2024
Authority
DPA Commissioner
About this data
Cite as: Cookie Fines. Google LLC - Cyprus (2024). Retrieved from cookiefines.eu
Last updated: