The Liechtensteiner data protection authority ('DSS') issued, on 3 March 2022, a statement addressing the use of Google's web analysis tool, Google Analytics, following decisions by data protection authorities across Europe on the same. In particular, the DSS stated that it had already highlighted, in its 2020 activity report, the data protection issues that arise with the use of Google Analytics. More specifically, the DSS noted that, since the judgement in Data Protection Commissioner v. Facebook Ireland Limited, Maximillian Schrems (C-311/18) ('the Schrems II Case'), it does not find any legal basis to justify the transfer of personal data transfer to the US associated with the use of Google Analytics,  despite the Google Analytics feature allowing anonymisation of IP addresses, a function which can be implemented by website operators. 

In this regard, the DSS stated that its view has now been confirmed by decisions of other data protection authorities across Europe in connection with the 101 complaints by None of your business ('NOYB') regarding the use of Google Analytics. Additionally, the DSS noted that NOYB also filed complaints with the DSS against three Liechtenstein companies and institutions, which were withdrawn after the quick cessation of use of Google Analytics by the companies concerned. Moreover, the DSS pointed to the coordinated decisions of the Austrian data protection authority and the French data protection authority with regards to the 101 complaints and noted that further decisions are expected from European authorities against the use of Google Analytics. 

Notably, the DSS called on affected entities to design their websites in compliance with data protection rules and to use alternative, data protection-compliant solutions instead of Google Analytics. 

You can read the press release, only available in German, here.