Precedent corpus / CNIL (France)
Anonymised French website operator
CNIL (France) case MED-GOOGLE-ANALYTICS-ANONYMISED, decided 2022-02-10. No monetary penalty (reprimand or guidance).
What the regulator decided
On 10 February 2022 the CNIL put a French website operator on formal notice, holding that the unique identifiers, IP addresses, browser data and metadata collected through the Google Analytics functionality and transferred to Google LLC in the United States could be justified under no Chapter V instrument, and so compromised the level of protection guaranteed by Article 44 GDPR. The operator was given one month to comply, if necessary by ceasing to use the tool.
Primary source
Regulator-owned URL. Quote this in legal briefs and academic citations.
https://www.cnil.fr/sites/default/files/atoms/files/med_google_analytics_anonymisee.pdfArchived snapshot
Wayback Machine snapshot of the primary source. Use this when the regulator URL might be refactored or expire.
https://web.archive.org/web/20230308201444/https://www.cnil.fr/sites/default/files/atoms/files/med_google_analytics_anonymisee.pdfConsentMark interpretation
Operator-readable note on how this case shapes the ConsentMark scanner narrative. Not a legal opinion; cites the primary source.
Published in anonymised form: the CNIL redacted the decision number, date and respondent because the tool is widely used and the point was general, so the case_ref here is a constructed stable id, not a CNIL number. Decided on the post-Schrems II position; the EU-US Data Privacy Framework adequacy decision of 10 July 2023 changed the transfer analysis prospectively for certified US importers. Both 2022 CNIL pages now 301 elsewhere and the PDF 404s, so archive_url is load-bearing.
Verification trail
- Verified by
- donal
- Verified at
- 2026-08-18
- Review due
- 2027-02-18
Cite this case
Pick the format that matches where you are pasting. The methodology version is preserved in every variant so the citation stays verifiable after future methodology changes.
@misc{consentmark-precedent-cnil-med-google-analytics-anonymised,
author = {{ConsentMark}},
year = {2022},
title = {CNIL (France) MED-GOOGLE-ANALYTICS-ANONYMISED - Anonymised French website operator},
howpublished = {\url{https://www.consentmark.com/precedent/cnil-med-google-analytics-anonymised}},
note = {ConsentMark methodology v1.3}
}ConsentMark. (2022, February 10). CNIL (France) MED-GOOGLE-ANALYTICS-ANONYMISED - Anonymised French website operator. Methodology v1.3. https://www.consentmark.com/precedent/cnil-med-google-analytics-anonymised[CNIL (France) MED-GOOGLE-ANALYTICS-ANONYMISED - Anonymised French website operator - ConsentMark](https://www.consentmark.com/precedent/cnil-med-google-analytics-anonymised)CNIL (France) MED-GOOGLE-ANALYTICS-ANONYMISED - Anonymised French website operator - ConsentMark, 2022-02-10, methodology v1.3, https://www.consentmark.com/precedent/cnil-med-google-analytics-anonymised