C029-60 UCD

Data Transfers
Case project
Controller
UCD
Case status
Pending (4 years and more)
Filed: (4 years 2 months ago)

This is one of noyb 101 complaints which were filed after the "Schrems II" judgement in Summer 2020. The judgement invalidated the EU-US data transfer mechanism "Privacy Shield". The cases were generated based on implemented Google Analytics or Facebook tracking code on websites by EU providers, which leads to unlawful data transfers to the United States.

Protocol
Data Summary
21.07.2023
noyb called the DPC and requested a status update
14.06.2022
Update by DPC

"Though engagement with the website owner (UCD) it has been determined that upon implementation of the Google Analytics tool the IP address anonymisation was not enabled and this was the position at the time of the complaint in August 2020. However, it was enabled on 01 October 2020 and remains so. The website owner confirms that at the time of the complaint the use of Google Analytics was governed by Google Ads Data Processing Terms dated August 2020 which includes SCC's entered into by the website owner as data exporter. The DPC has undertaken an examination of the website owners role in ensuring that the necessary supplementary measures were in place through its use of the Google Analytics tool, with respect to the transfer of personal data, and the DPC expects to finalise its determination of this complaint in the coming weeks. "

20.05.2022
DPC informed us that there has been a change of case manager

DPC informed us that there has been a change of case manager and that the complaints continue to be under investgation.

21.02.2022
DPC again informed us that the complaint continues to be under investigation

DPC notified us again that our complaints continue to be under investgation.

18.02.2022
noyb asked the DPC for an Update
19.10.2021
DPC again informed us that the complaint continues to be under investigation

DPC notified us that our complaints C-029-58/59 and 60 continue to be under examination.

08.06.2021
DPC again informed us that the complaint continues to be under investigation

DPC notified us that our complaints C-029-58, 59 and 60 continue to be under examination and that the DPC continues to engage with the data controllers.

26.02.2021
DPC informed us that the complaint continues to be under investigation

DPC informed us that the complaints C-29-58, 59 and 60 continue to be under examination and that they have requested more information from the controller.

25.11.2020
DPC said that they will give us an update within three months

DPC said that they will give us an update within three months of the date in which the complaints were received, and every three months after.

13.11.2020
DPC replied that they consider themselves to be the competent SA

DPC replied that they consider themselves to be the competent SA, and that they will keep us informed if there is another LSA. .

05.11.2020
DPC promised to get back at the earliest opportunity
29.10.2020
noyb sent followup email to the DPC

noyb sent follow-up e-mail to the DPC.

04.09.2020
noyb submited the attachments to the complaint via email

noyb submited the attachments to the complaint via email. DPC acknowledged receipt on the same day, but asked for a PDF of the HAR file.

28.08.2020
DPC sent another letter

DPC sent another letter, stating that the controller has been furnished with a copy of the complaint and a number of questions have been put to the controller.

26.08.2020
DPC sent a letter stating that the complaint will be handled

DPC sent a letter stating that the complaint will be handled. Also the DPC again mentioned the broken link.

19.08.2020
DPC confirmed receipt

DPC confirmed receipt and mentioned a link to the documents not working.

17.08.2020
Complaint