If your organization received a demand letter from an attorney in Austria, Germany or other EU country regarding use of Google Fonts or if you generally are interested in updates on international data transfers, you should take 60 mins and watch the recording of the Privacy Ring discussion last week with high ranked speakers.

Google Fonts:

• Google Fonts is different than Google Analytics as no cookies are dropped.
• Authorities see no strong position for individuals as claimants are not individually affected. At least German authorities, therefore, have not yet started any proceedings against organizations using Google Fonts in Germany. 
• Ongoing: Proceedings by the lawyers chamber in Austria against the attorney representing the individuals in the warning letters.
• Solution recommended by DPAs: local implementation of Google Fonts.

Transatlantic Data Protection Framework:

• Austrian Data Protection Authority “I might be a witch, but I don’t have a crystal ball.”  UPDATE: -> We now know more and expect the Framework in March or April 2023.  
• US presidential order will be passed in October (dates have been pushed since May). Then the Framework discussions continue between EU and US and the EDPB needs to approve (UPDATE: rough timing: March or April).  Expected: A waterproof solution that will survive Schrems III. 
• General criticism in the audience and by non-authority speakers: “Weak” the guidance by EU/authorities regarding third country data transfers- Authorities should focus on "severe" cases and also go after non-US providers, e.g. China or India. Reaction by authorities: Authorities receive many complaints by individuals are obliged by law to deal with them.

Recording available. If you speak German, I definitely recommend that you watch this!