Recherche avancée

Sur d’autres sites (9838)

• CCPA vs GDPR : Understanding Their Impact on Data Analytics

  19 mars, par Alex Carmona

  With over 400 million internet users in Europe and 331 million in the US (11% of which reside in California alone), understanding the nuances of privacy laws like the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) is crucial for compliant and ethical consumer data collection.

  Navigating this compliance landscape can be challenging for businesses serving European and Californian markets.

  This guide explores the key differences between CCPA and GDPR, their impact on data analytics, and how to ensure your business meets these essential privacy requirements.

  What is the California Consumer Privacy Act (CCPA) ?

  The California Consumer Privacy Act (CCPA) is a data privacy law that gives California consumers control over their personal information. It applies to for-profit businesses operating in California that meet specific criteria related to revenue, data collection and sales.

  Origins and purpose

  The CCPA addresses growing concerns about data privacy and how businesses use personal information in California. The act passed in 2018 and went into effect on 1 January 2020.

  Key features

  • Grants consumers the right to know what personal information is collected
  • Provides the right to delete personal information
  • Allows consumers to opt out of the sale of their personal information
  • Prohibits discrimination against consumers who exercise their CCPA rights

  Key definitions under the CCPA framework

  • Business : A for-profit entity doing business in California and meeting one or more of these conditions :
    • Has annual gross revenues over $25 million ;
    • Buys, receives, sells or shares 50,000 or more consumers’ personal information ; or
    • Derives 50% or more of its annual revenues from selling consumers’ personal information
  • Consumer : A natural person who is a California resident
  • Personal Information : Information that could be linked to, related to or used to identify a consumer or household, such as online identifiers, IP addresses, email addresses, social security numbers, cookie identifiers and more

  What is the General Data Protection Regulation (GDPR) ?

  The General Data Protection Regulation (GDPR) is a data privacy and protection law passed by the European Union (EU). It’s one of the strongest and most influential data privacy laws worldwide and applies to all organisations that process the personal data of individuals in the EU.

  Origins and purpose

  The GDPR was passed in 2016 and went into effect on 25 May 2018. It aims to harmonise data privacy laws in Europe and give people in the European Economic Area (EEA) privacy rights and control over their data.

  Key features

  • Applies to all organisations that process the personal data of individuals in the EEA
  • Grants individuals a wide range of privacy rights over their data
  • Requires organisations to obtain explicit and informed consent for most data processing
  • Mandates appropriate security measures to protect personal data
  • Imposes significant fines and penalties for non-compliance

  Key definitions under the GDPR framework

  • Data Subject : An identified or identifiable person
  • Personal Data : Any information relating to a data subject
  • Data Controller : The entity or organisation that determines how personal data is processed and what for
  • Data Processor : The entity or organisation that processes the data on behalf of the controller

  CCPA vs. GDPR : Key similarities

  The CCPA and GDPR enhance consumer privacy rights and give individuals greater control over their data.

  Dimension	CCPA	GDPR
  Purpose	Protect consumer privacy	Protect individual data rights
  Key Rights	Right to access, delete and opt out of sale	Right to access, rectify, erase and restrict processing
  Transparency	Requires transparency around data collection and use	Requires transparency about data collection, processing and use

  CCPA vs. GDPR : Key differences

  While they have similar purposes, the CCPA and GDPR differ significantly in their scope, approach and specific requirements.

  Dimension	CCPA	GDPR
  Scope	For-profit businesses only	All organisations processing EU consumer data
  Territorial Reach	California-based natural persons	All data subjects within the EEA
  Consent	Opt-out system	Opt-in system
  Penalties	Per violation based on its intentional or negligent nature	Case-by-case based on comprehensive assessment
  Individual Rights	Narrower (relative to GDPR)	Broader (relative to CCPA)

  CCPA vs. GDPR : A multi-dimensional comparison

  The previous sections gave a broad overview of the similarities and differences between CCPA and GDPR. Let’s now examine nine key dimensions where these regulations converge or diverge and discuss their impact on data analytics.

  

  #1. Scope and territorial reach

  The GDPR has a much broader scope than the CCPA. It applies to all organisations that process the personal data of individuals in the EEA, regardless of their business model, purpose or physical location.

  The CCPA applies to medium and large for-profit businesses that derive a substantial portion of their earnings from selling Californian consumers’ personal information. It doesn’t apply to non-profits, government agencies or smaller for-profit companies.

  Impact on data analytics

  The difference in scope significantly impacts data analytics practices. Smaller businesses may not need to comply with either regulation, some may only need to follow the CCPA, while most global businesses must comply with both. This often requires different methods for collecting and processing data in California, Europe, and elsewhere.

  #2. Penalties and fines for non-compliance

  Both the CCPA and GDPR impose penalties for non-compliance, but the severity of fines differs significantly :

  CCPA	Maximum penalty
  	$2,500 per unintentional violation $7,500 per intentional violation

  “Per violation” means per violation per impacted consumer. For example, three intentional CCPA violations affecting 1,000 consumers would result in 3,000 total violations and a $22.5 million maximum penalty (3,000 × $7,500).

  

  The largest CCPA fine to date was Zoom’s $85 million settlement in 2021.

  

  In contrast, the GDPR has resulted in 2,248 fines totalling almost €6.6 billion since 2018 — €2.4 billion of which were for non-compliance.

  GDPR	Maximum penalty
  	€20 million or 4% of all revenue earned the previous year

  So far, the biggest fine imposed under the GDPR was Meta’s €1.2 billion fine in May 2023 — 15 times more than Zoom had to pay California.

  Impact on data analytics

  The significant difference in potential fines demonstrates the importance of regulatory compliance for data analytics professionals. Non-compliance can have severe financial consequences, directly affecting budget allocation and business operations.

  Businesses must ensure their data collection, storage and processing practices comply with regulations in both Europe and California.

  Choosing privacy-first, compliance-ready analytics platforms like Matomo is instrumental for mitigating non-compliance risks.

  #3. Data subject rights and consumer rights

  The CCPA and GDPR give people similar rights over their data, but their limitations and details differ.

  Rights common to the CCPA and GDPR

  • Right to Access/Know : People can access their personal information and learn what data is collected, its source, its purpose and how it’s shared
  • Right to Delete/Erasure : People can request the deletion of their personal information, with some exceptions
  • Right to Non-Discrimination : Businesses can’t discriminate against people who exercise their privacy rights

  Consumer rights unique to the CCPA

  • Right to Opt Out of Sale : Consumers can prohibit the sale of their personal information
  • Right to Notice : Businesses must inform consumers about data collection practices
  • Right to Disclosure : Consumers can request specific information collected about them

  Data subject rights unique to the GDPR

  • Right to be Informed : Broader transparency requirements encompass data retention, automated decision-making and international transfers
  • Right to Rectification : Data subjects may request the correction of inaccurate data
  • Right to Restrict Processing : Consumers may limit data use in certain situations
  • Right to Data Portability : Businesses must provide individual consumer data in a secure, portable format when requested
  • Right to Withdraw Consent : Consumers may withdraw previously granted consent to data processing

  	CCPA	GDPR
  Right to Access or Know	✓	✓
  Right to Delete or Erase	✓	✓
  Right to Non-Discrimination	✓	✓
  Right to Opt-Out	✓
  Right to Notice	✓
  Right to Disclosure	✓
  Right to be Informed		✓
  Right to Rectification		✓
  Right to Restrict Processing		✓
  Right to Data Portability		✓
  Right to Withdraw Consent		✓

  Impact on data analytics

  Data analysts must understand these rights and ensure compliance with both regulations, which could potentially require separate data handling processes for EU and California consumers.

  #4. Opt-out vs. opt-in

  The CCPA generally follows an opt-out model, while the GDPR requires explicit consent from individuals before processing their data.

  Impact on data analytics

  For CCPA compliance, businesses can collect data by default if they provide opt-out mechanisms. Failing to process opt-out requests can result in severe penalties, like Sephora’s $1.2 million fine.

  Under GDPR, organisations must obtain explicit consent before collecting any data, which can limit the amount of data available for analysis.

  #5. Parental consent

  The CCPA and GDPR have provisions regarding parental consent for processing children’s data. The CCPA requires parental consent for children under 13, while the GDPR sets the age at 16, though member states can lower it to 13.

  Impact on data analytics

  This requirement significantly impacts businesses targeting younger audiences. In Europe and the US, companies must implement different methods to verify users’ ages and obtain parental consent when necessary.

  The California Attorney General’s Office recently fined Tilting Point Media LLC $500,000 for sharing children’s data without parental consent.

  #6. Data security requirements

  Both regulations require businesses to implement adequate security measures to protect personal data. However, the GDPR has more prescriptive requirements, outlining specific security measures and emphasising a risk-based approach.

  Impact on data analytics

  Data analytics professionals must ensure that data is processed and stored securely to avoid breaches and potential fines.

  #7. International data transfers

  Both the CCPA and GDPR address international data transfers. Under the CCPA, businesses must only inform consumers about international transfers. The GDPR has stricter requirements, including ensuring adequate data protection safeguards for transfers outside the EEA.

  

  Other rules, like the Payment Services Directive 2 (PSD2), also affect international data transfers, especially in the financial industry.

  PSD2 requires strong customer authentication and secure communication channels for payment services. This adds complexity to cross-border data flows.

  Impact on data analytics

  The primary impact is on businesses serving European residents from outside Europe. Processing data within the European Union is typically advisable. Meta’s record-breaking €1.2 billion fine was specifically for transferring data from the EEA to the US without sufficient safeguards.

  Choosing the right analytics platform helps avoid these issues.

  For example, Matomo offers a free, open-source, self-hosted analytics platform you can deploy anywhere. You can also choose a managed, GDPR-compliant cloud analytics solution with all data storage and processing servers within the EU (in Germany), ensuring your data never leaves the EEA.

  #8. Enforcement mechanisms

  The California Attorney General is responsible for enforcing CCPA requirements, while in Europe, the Data Protection Authority (DPA) in each EU member state enforces GDPR requirements.

  Impact on data analytics

  Data analytics professionals should be familiar with their respective enforcement bodies and their powers to support compliance efforts and minimise the risk of fines and penalties.

  #9. Legal basis for personal data processing

  The GDPR outlines six legal grounds for processing personal data :

  • Consent
  • Contract
  • Legal obligation
  • Vital interests
  • Public task
  • Legitimate interests

  The CCPA doesn’t explicitly define lawful bases but focuses on consumer rights and transparency in general.

  Impact on data analytics

  Businesses subject to the GDPR must identify and document a valid lawful basis for each processing activity.

  Compliance rules under CCPA and GDPR

  Complying with the CCPA and GDPR requires a comprehensive approach to data privacy. Here’s a summary of the essential compliance rules for each framework :

  

  CCPA compliance rules

  • Create clear and concise privacy policies outlining data collection and use practices
  • Give consumers the right to opt-out
  • Respond to consumer requests to access, delete and correct their personal information
  • Implement reasonable security measures for consumers’ personal data protection
  • Never discriminate against consumers who exercise their CCPA rights

  GDPR compliance rules

  • Obtain explicit and informed consent for data processing activities
  • Implement technical and organisational controls to safeguard personal data
  • Designate a Data Protection Officer (DPO) if necessary
  • Perform data protection impact assessments (DPIAs) for high-risk processing activities
  • Maintain records of processing activities
  • Promptly report data breaches to supervisory authorities

  Navigating the CCPA and GDPR with confidence

  Understanding the nuances of the CCPA and GDPR is crucial for businesses operating in the US and Europe. These regulations significantly impact data collection and analytics practices.

  Implementing robust data security practices and prioritising privacy and compliance are essential to avoid severe penalties and build trust with today’s privacy-conscious consumers.

  Privacy-centric analytics platforms like Matomo enable businesses to collect, analyse and use data responsibly and transparently, extracting valuable insights while maintaining compliance with both CCPA and GDPR requirements.

  Start your 21-day free trial today !

  no credit card required

• Privacy-friendly analytics : The benefits of an ethical, GDPR-compliant platform

  13 juin, par Joe

  Your visitors shouldn’t feel like you’re spying on them — even if you’re just trying to improve the user experience or track your marketing efforts. 

  While many analytics platforms make customers feel that way thanks to intrusive cookie consent banners and highly personalised ads, there is a growing movement towards ethical, privacy-friendly analytics.

  In this article, you’ll learn what privacy-friendly analytics is, why it matters, what to look for in a solution and which of the leading providers is right for you. 

  What is privacy-friendly analytics ? 

  Privacy-friendly analytics is a form of website analytics that collects and analyses data in a way that respects the user’s privacy. It’s a type of ethical web analytics.

  Privacy-friendly platforms limit personal data collection and anonymise individual user data while being transparent about collection and tracking methods. They help companies adhere to data protection laws (like GDPR, CCPA, and HIPAA) and new privacy laws (like OCPA, FDBR, and TDPSA) without configuring custom settings. 

  Why use privacy-friendly analytics ? 

  Millions of businesses choose privacy-friendly analytics platforms like Matomo. Here are a few reasons why : 

  Build trust with customers

  Research shows that the vast majority of consumers don’t trust companies with their data, believing that they prioritise profits over data protection. 

  Privacy-friendly analytics can help businesses prove they aren’t out to profit from consumer data and regain customer trust. This can ultimately boost revenue. According to Cisco’s Data Privacy Benchmark Study, organisations gain $180 for every $100 spent on privacy. 

  Comply with privacy regulations

  Data privacy regulations, such as GDPR, protect consumer privacy and establish strict rules governing how businesses can collect and use personal data.

  The cost of non-compliance is high. Under GDPR, fines can be up to €20 million, or 4% of worldwide annual revenue.

  Thanks to features like data anonymisation and the default use of first-party cookies, privacy-friendly analytics platforms can support and strengthen compliance efforts. 

  In fact, the French Data Protection Authority (CNIL) approved Matomo as one of the only web analytics tools to collect data without tracking consent.

  Minimise the impact of a breach

  According to IBM’s Cost of a Data Breach report, the average cost of a data breach is nearly $4.5 million. The more personally identifiable information (PII) is involved, the higher the fines and penalties. 

  A privacy-friendly analytics tool can reduce the potential impact of a breach by minimising the amount of personal information you hold. 

  Is Google Analytics privacy-friendly ?

  Google may be the best-known analytics platform, but it’s not the best choice for businesses that want to collect data responsibly and ethically. 

  Here are just a few of Google Analytics’s privacy issues :

  • It uses analytics data to run its advertising business.
  • It may train large language models like Gemini with analytics data.
  • It requires a specific setup to be GDPR compliant that isn’t available out of the box.

  Google Analytics’s ongoing issues with privacy laws like GDPR also raise doubt. The French and Austrian Data Protection Authorities have banned Google Analytics in the past, and there is no guarantee they won’t do so again. 

  What to look for in privacy-friendly analytics ?

  Several privacy-friendly analytics tools are available. To find the right one for your brand, look for the following features.

  Data ownership

  Choose a provider that gives you as much control over your users’ data as possible. Ideally, this will be via an on-site solution where you store data on your servers. For cloud-based options, ensure your analytics provider can’t access, use or sell it.

  With 100% data ownership, you have the power to protect your users’ privacy. You know where your customer data is stored and what’s happening to it without external influence.

  Open source

  The only genuinely privacy-friendly software is open-source software. Open-source software means anyone can review the code to ensure it does what it promises — in this case, maximising privacy. 

  Matomo is an open-source software company. Our source code is on GitHub, where everyone can see precisely how our platform tracks and stores user data. A community of developers also regularly examines and reviews our code to further strengthen security. 

  Data anonymisation 

  Privacy-friendly analytics should allow marketers to completely anonymise the data they collect. They achieve this through several techniques like IP anonymisation and pseudonymised user IDs that modify or remove personally identifiable data so it can’t be linked to individuals.

  

  Matomo’s data anonymisation settings 

  In Matomo, for example, you can anonymise the following things in the platform’s Privacy settings :

  • IP address
  • Location
  • User ID

  IP address anonymisation is enabled by default in Matomo.

  No data sampling 

  Data sampling involves extrapolating analytics reports from an incomplete data set. Google Analytics uses this practice and relies on estimates, leading to incomplete and potentially inaccurate results.

  Privacy-friendly analytics should provide 100% accurate insights without making assumptions about your users’ data.

  GDPR compliance

  Privacy-friendly web analytics platforms adhere to even the strictest privacy laws, including GDPR, HIPAA and CCPA, thanks to the following features :

  • Data anonymisation
  • Cookieless tracking
  • EU data storage
  • First-party cookies by default

  

  Matomo data subject access request settings
  (Image Source)

  Privacy-first platforms also make it easy for companies to fulfil data subject access requests. In Matomo, for example, a dedicated feature lets you find, download and delete all of the data you hold about specific individuals. 

  Cookieless tracking

  Cookieless tracking is a form of visitor tracking that uses methods other than cookies to identify individual users. It is more privacy-friendly because no personal data is collected, and users can withhold consent from cookie banners.

  Matomo uses the most privacy-friendly industry-leading cookieless tracking method, config_id, to anonymously track visitors without fingerprinting them. 

  Top 3 privacy-friendly analytics platforms

  We’ve shortlisted three of the leading privacy-friendly analytics platforms. Learn what they offer, what makes them different and how much they cost.

  Matomo

  Matomo is an open-source web analytics tool and privacy-focused Google Analytics alternative trusted by over one million sites in over 190 countries and over 50 languages. 

  

  Matomo dashboard

  Matomo prioritises privacy and keeping businesses compliant with global privacy regulations like GDPR, CCPA and HIPAA. The data you collect is 100% accurate and yours alone. We don’t share it or use it for other purposes. 

  Benefits

  • Matomo’s all-in-one solution offers traditional web and behavioural analytics, such as heatmaps and session recordings. It also includes a free, open-source tag manager. 
  • Matomo gives you the choice of where to store your user’s data. With Matomo Cloud, that’s in our European servers. With Matomo On-Premise, that’s on your servers.
  • Matomo is open-source. Hundreds of independent developers have reviewed our code, and you can view it yourself on GitHub.

  Pricing 

  Hosting Matomo On-Premise is free, while Matomo Cloud costs $26 per month. 

  Fathom

  Fathom Analytics is a simple, easy-to-use alternative to Google Analytics that puts a premium on privacy. 

  

  Fathom dashboard
  (Image Source)

  Fathom has made its platform as easy to use as possible. You can install Fathom on any website or CMS using a single line of code. It also means the platform won’t massively impact your site’s speed or SEO performance. 

  Benefits

  • Fathom complies with all major privacy regulations, including GDPR and CCPA.
  • Fathom doesn’t sample data. It also blocks bots and scrapers, so you only see human visitors.
  • Fathom anonymises IP addresses, so you don’t have to show cookie banners.

  Drawbacks

  • Fathom doesn’t offer many of Matomo’s advanced features like e-commerce tracking, heatmaps, and session recordings.
  • The premium version of Fathom is not open-source. 

  Pricing 

  From $15 per month.

  Plausible

  Plausible Analytics is an open-source, privacy-friendly analytics tool built and hosted in the EU.

  

  Plausible dashboard
  (Image Source)

  The platform launched in 2019 as a lightweight, easy-to-use alternative to Google Analytics. Its simplicity is a big selling point. Instead of dozens of menus, it presents the information you need on a single page.

  Benefits

  • Plausible boasts an ultra-lightweight script, which means it has a minimal impact on page loading times. 
  • Plausible is GDPR and CCPA-compliant by design, so there’s no need for cookie banners.
  • Plausible is an open-source software with the source code available on GitHub.

  Drawbacks

  • Plausible lacks advanced privacy controls like a GDPR manager.
  • It has none of Matomo’s advanced features like A/B testing, session recordings or heatmaps. 

  Pricing 

  From $9 per month

  Try Matomo for free

  Ready to try a privacy-friendly analytics solution ? Making the switch is easy with Matomo, as it’s one of the only platforms to import historical Google Analytics data. You can also try Matomo for free for 21 days — no credit card required. 

• Problem with ffplay from webcam stream using complex filters

  29 mai 2022, par efelbar

  I'm trying to stream video from a webcam (at /dev/video2) through ffplay to scale and recolor it, add some text, and then reduce the number of colors with palettes. I don't get any errors, but running the ffplay command :

  


  ffplay -i /dev/video2 -vf "hflip,\
  colorbalance=\
    rs=0.4:\
    bs=-0.4\
  ,\
  scale=\
    trunc(iw/8):\
    trunc(ih/8)\
  ,\
  drawtext=\
    text=\
      'efelbar':\
      fontcolor=white:\
      fontsize=10:\
      box=1:\
      boxcolor=black:\
      boxborderw=5:\
      x=(w-text_w)/2:\
      y=(h-text_h)/2\
  ,\
  split[s0][s1];\
  [s0]palettegen=\
    max_colors=16\
  [p];\
  [s1][p]paletteuse"


  


  seems to stall, and fails to produce video output.

  


  Running the simpler command ffplay -i /dev/video2 -vf "split[s0][s1];[s0]palettegen=max_colors=16[p];[s1][p]paletteuse", which takes a stream from a webcam and (should) reduce the number of colors, results in it just sitting there without showing the actual output stream. This might just be a performance issue because I'm on older hardware, but it doesn't give output relfective of that.

  


  The output of that command is as follows :

  


  ffplay version n5.0 Copyright (c) 2003-2022 the FFmpeg developers
  built with gcc 11.2.0 (GCC)
  configuration: --prefix=/usr --disable-debug --disable-static --disable-stripping --enable-amf --enable-avisynth --enable-cuda-llvm --enable-lto --enable-fontconfig --enable-gmp --enable-gnutls --enable-gpl --enable-ladspa --enable-libaom --enable-libass --enable-libbluray --enable-libdav1d --enable-libdrm --enable-libfreetype --enable-libfribidi --enable-libgsm --enable-libiec61883 --enable-libjack --enable-libmfx --enable-libmodplug --enable-libmp3lame --enable-libopencore_amrnb --enable-libopencore_amrwb --enable-libopenjpeg --enable-libopus --enable-libpulse --enable-librav1e --enable-librsvg --enable-libsoxr --enable-libspeex --enable-libsrt --enable-libssh --enable-libsvtav1 --enable-libtheora --enable-libv4l2 --enable-libvidstab --enable-libvmaf --enable-libvorbis --enable-libvpx --enable-libwebp --enable-libx264 --enable-libx265 --enable-libxcb --enable-libxml2 --enable-libxvid --enable-libzimg --enable-nvdec --enable-nvenc --enable-shared --enable-version3
  libavutil      57. 17.100 / 57. 17.100
  libavcodec     59. 18.100 / 59. 18.100
  libavformat    59. 16.100 / 59. 16.100
  libavdevice    59.  4.100 / 59.  4.100
  libavfilter     8. 24.100 /  8. 24.100
  libswscale      6.  4.100 /  6.  4.100
  libswresample   4.  3.100 /  4.  3.100
  libpostproc    56.  3.100 / 56.  3.100
Input #0, video4linux2,v4l2, from '/dev/video2':B sq=    0B f=0/0   
  Duration: N/A, start: 254970.739108, bitrate: 147456 kb/s
  Stream #0:0: Video: rawvideo (YUY2 / 0x32595559), yuyv422, 640x480, 147456 kb/s, 30 fps, 30 tbr, 1000k tbn


  


  I'm running this on a thinkpad t420s, so I definitely wouldn't be surprised if my laptop just can't process video that quickly. If that is the case, suggestions for optimizations would be great !