Norway: Issued preliminary ruling by Norwegian Data Protection Authority in investigation into legality of data transfers through Google Analytics

On 1 March 2023, Norway's Data Protection Authority (Datatilsynet) issued a preliminary opinion regarding the non-compliance of Google Analytics's data transfers to the United States with the EU General Data Protection Regulation (GDPR). Datatilsynet found that Google Analytics breaches the GDPR obligations on transfers of personal data and has provided advance notice to the parties in the case to comment on the findings before the formal decision is issued at the end of April. Datatilsynet also reiterated its recommendation that companies seek alternatives to Google Analytics.