Google Analytics is in the crossfire in Germany.

The data protection authorities of the German states are being flooded with complaints, approximately 200,000 in number, regarding deployment of the Google Analytics service on websites in a manner which allegedly is in violation of GDPR.

At issue is whether deploying Google Analytics is possible without acquiring the consent of the end user prior to deploying the Google Analytics cookie on the end user’s device.

While the appropriate legal basis for analytics cookies has been under debate, with some arguing that legitimate interest was a possibility, after the recent CJEU decision in Planet49 this opinion is being challenged.

Details from Datenschutzbeauftragter.