> finally, if a transfer of personal data is envisaged to a third country that isn’t the subject of an Adequacy Decision and if appropriate safeguards are absent, a transfer can be made based on a number of derogations for specific situations for example, where an individual has explicitly consented to the proposed transfer after having been provided with all necessary information about the risks associated with the transfer.
https://ec.europa.eu/info/law/law-topic/data-protection/refo...
The court has not said that it's illegal to use GA.
GP is correct, they are not free to share "any data", where their right to share "any data" and my right to privacy conflict.
We all love our freedoms - but we have to respect that other people have freedoms too - and we don't have the freedom to take theirs.
That's an interesting way of putting it; you've phrased it in terms of your personal data and the sharer's personal data. But the context is analytics; single datapoints are irrelevant. This is all about sharing data about other people.
Anyway, EU companies are not allowed to even collect data, unless they can justify it. I don't know if that is supposed to also be extra-territorial, so it applies universally (I really hope not).