Sweden: Issued ruling in IMY investigation into Google Analytics usage by CDON, Coop, Dagens Industri and Tele2

On 3 July 2023, the Swedish Privacy Authority (IMY) issued a ruling concluding its investigation into Google Analytics usage by CDON, Coop, Dagens Industri and Tele2. The IMY examined that the supplementary technical measures implemented by the four companies, in addition to EU standard contractual clauses, were not sufficient to guarantee the necessary level of protection for the data they transferred to the United States following the Schrems II judgement invalidating the Privacy Shield. The IMY issued an administrative sanction fee of SEK 12 million against Tele2 and SEK 300'000 against CDON, as they had not taken the same extensive protective measures as Coop and Dagens Industri. While Tele2 has recently stopped using the statistics tool on its own initiative, IMY has ordered the other three companies also to stop using the tool.