[poniko]

Because of the law in US that the governments have right to all data stored on any server that a US company or its subsidiaritets own. That clash with the EU GDPR law and the fact that Sweden categorize IP-adress as a Privacy data point.

I.e they can switch to a European vendor that do tracking and analytics.

[he0001]

> the fact that Sweden categorize IP-adress as a Privacy data point

Static IP-adresses are considered identity by EU court[0]. There have been several verdicts where EU court have ruled them subjective to GDPR.

[0] https://curia.europa.eu/juris/liste.jsf?language=en&num=C-70...

[poniko]

yes? You can still store data within Sweden/EU that contains GDPR data, you just need to have a valid reason and comply with the GDPR rules i.e remove the data when you don't need them for the reason you where saving them. Store the data outside EU is never ok.

[alkonaut]

But if you wash the IP and any other PII then you can store it anywhere? So why store IP? Is it because GA doesn't offer an option to wipe PII from the messages?

[poniko]

This is where it gets tricky and why I need to find out more details about the new rulings. Google does not store IP when the user is from the EU but this still seems inadequate to the IMY.

https://support.google.com/analytics/answer/12017362?hl=en

[alkonaut]

So long as all PII is cleared client side and not merely dropped before storage I can’t see any issues with GDPR?

[AbhiAmbad]

yeah, This is the great option also.