Enforcing the General Data Protection Regulation

The EU General Data Protection Regulation (GDPR) introduced a new standard of data protection and has caused a great extent of enforcement action. In addition, 18 months after the CJEU "Schrems II" decision invalidating the EU-US Privacy Shield, two independent decisions qualified the use of Google Analytics as a violation of the GDPR. National data protection agencies across Europe followed suit, announcing scrutiny of the web analytics service and foreshadowing future crackdowns on practices deemed self-evident in the digital economy. This thread showcases how European authorities are enforcing the GDPR's rules on both national and international data protection.