What is hoped for is that there will be an agreement between the USA and EUROPE to resolve the issue as there are many services at risk, having not been considered compliant with GDPR for some time. In practice, every service that transfers and/or processes data outside of Europe is affected. We are talking about many services, some of which have no European alternatives to replace them, including many social platforms like Facebook, Instagram, TikTok, etc., or email marketing services such as MailChimp, klaviyo, etc. The problem is not the legal headquarters of the service provider, but the physical location of the servers or the transfer of data (even a simple backup) to servers not located in Europe.
Not to mention CDN or DNS services like Cloudflare, although the authority seems to be primarily focused on tracking for marketing purposes. However, it should be noted that the recent reminder emphasizes an important concept: it is the website owner who must assess whether the service in use complies with GDPR. And this is where a perfect storm could arise, putting every SEO and SEM activity in Europe in serious crisis. This will have a very drastic impact, especially on small retailers and small agencies.
We were already in turmoil over the upcoming closure in July 2023 of Universal Analytics and the necessary migration to GA4: which we discussed here.
The problem is that transitioning from UA to GA4 is not simple; many software and platforms dedicated to SEO and SEM campaigns, not just Google products, require a connection with UA and are still not updated to use Google Analytics 4, let alone a varied ecosystem of alternative solutions. Only recently has the PrestaShop Metrics Module become compatible with GA4, but it is not compatible with alternatives such as Matomo and Shinystat.
We can certainly do without the PrestaShop Metrics module, which is not essential, but what about the advanced features of Semrush or SeoZoom? The UA metrics are also used by services such as Coobis, Link Building, and Getfluence, which facilitate the meeting between publishers and/or influencers and companies.
As users, we will still be followed by foreign advertising; the General Data Protection Regulation (GDPR) is, in my opinion, a blatant witch hunt that imposes regulatory duties and solves nothing.
It also seems to be a blatant mix of technical ignorance and paranoia that has guided the legislator.