GuiGui's Show

Our methodology consists in installing Tags in isolation to analyze the types of data that Tags collect and contrast them to the legal and technical documentation, in collaboration with a legal expert. Across three studies – in-depth analysis of 6 Tags, automated analysis of 718 Tags, and analysis of Google “Consent Mode” – we discover multiple hidden data leaks, incomplete and diverging declarations, undisclosed third-parties and cookies, personal data sharing without consent and we further identify potential legal violations within EU Data Protection law.

Google Tag Manager (GTM), Twitter Base Pixel, LinkedIn Insight, Hotjar Tracking Code, Quantcast Advertise, comScore UDM.

Le Consent Mode cookieless de Google collecte bien des données à caractère personnel, toujours de manière active (en paramètre des URL), mais Google prétend que c'est passif (ce qui peut entraîner la non-application d'e-Privacy, mais pas du RGPD).

#étude