The Austrian data protection authority has found that the IP addresses and identifiers in Google Analytics cookie data were sufficiently personal to constitute a GDPR violation for purposes of transfer to the US.
The immediate order to cease use of Google Analytics pertains to a particular French website that was the subject of a GDPR complaint over data transfers, but signs show it expanding to the rest of the EU before long.
