- Enforcing jurisdiction
- Cyprus · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Google LLC – Complaint Upheld (Cyprus, 2024)
The DPA Commissioner upheld a complaint against Google for using Google Analytics to transfer personal data to the USA without user consent. This decision is important because it shows that companies must obtain consent before using tracking technologies. It reinforces the need for businesses to be transparent with users about data collection.
What happened
Google was found to have transferred personal data to the USA without obtaining prior user consent.
Who was affected
Users whose data was collected through Google Analytics without their consent.
What the authority found
The DPA Commissioner determined that Google violated consent requirements for third-party cookies.
Why this matters
This case highlights the importance of obtaining user consent for data transfers and tracking technologies. Companies should ensure they have clear consent mechanisms in place to avoid similar complaints.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Entities Involved
Source checks
Linked-source text retrieved.
Automated check recorded — 19 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Google Analytics was used to transfer personal data to the USA without obtaining prior user consent, violating third-party cookie consent requirements.
Outcome
Complaint Upheld
A data subject complaint that was upheld by the DPA.
Related Enforcement Actions (0)
No other enforcement actions found for Google LLC in CY
This is the only recorded action for this entity in this jurisdiction.
Similar Cases
Enforcement actions with similar violations
DPA case Takeaway B.V. - z2022-04011
2024 · Autoriteit Persoonsgegevens
DPA case 9782890
2022 · Garante per la protezione dei dati personali
DPA case 11/2022
2022 · Autorité de Protection des Données
DPA case ZSPR.440.331.2019.PR.PAM
2021 · Urząd Ochrony Danych Osobowych
Court case 6 U 81/23
2025 · DPA LGFrankfurt
Details
Decision Date
28 February 2024
Authority
DPA Commissioner
About this data
Cite as: Cookie Fines. Google LLC - Cyprus (2024). Retrieved from cookiefines.eu
Last updated: