The Swedish museum of natural history has reported a personal data breach after sharing IP addresses with Google Analytics.
The website of the Swedish Museum of Natural History, nrm.se, has been using the analysis tool Google Analytics since 2009. It is used to collect statistics in order to be able to follow the development of the number of visitors to the website and its various pages with the purpose of improving the site.
Until 1 March 2021, nrm.se used the tool without at the same time ensuring that the IP addresses collected were also anonymised. As of March 2, 2021, we have taken steps to ensure that this happens, ie that IP addresses are anonymised before being sent to Google Analytics.
In light of what has happened, we have chosen to report the previous handling as a personal data breach to the Swedish Authority for Privacy Protection (IMY).