On July 10, 2023, the European Commission redefined the rules for transferring data of EU citizens to the US by adopting its adequacy decision on the EU-US Data Privacy Framework (DPF).

Implications of the New Decision

For the last three years, the use of Google Analytics and other tools that transfer personal data to the US was not permitted. With no framework in place to regulate these data transfers, users were left facing legal uncertainties and potential data privacy issues.

This decision has finally clarified the ways in which personal data transfers can occur. In practice, before data flows can resume, US-based service providers like Google must self-certify with the EU-US DPF.

What Does This Mean for My Website: Can I Use Google Analytics Again?

EU-US data transfers are now regulated. We now need to wait for the providers affected by this decision to complete their self-certification process. Once they have, site owners would likely be able to resume using these tools.

As always, we’ll continue to monitor the situation. Check your account email preferences to be notified once major providers complete the self-certification process.