this is the blog post from noyb (the organisation who made the complaint):
https://noyb.eu/de/oesterr-dsb-eu-us-datenuebermittlung-goog...
pdf in english: https://noyb.eu/sites/default/files/2022-01/E-DSB%20-%20Goog...
pdf in english: https://noyb.eu/sites/default/files/2022-01/E-DSB%20-%20Goog...
> As a processor, the second respondent provided the website operator with numerous configuration options for Google Analytics. On the basis of the information received, it should be noted that the Respondent configured Google Analytics as stated. Due to a possible configuration error, the respondent did not activate the IP anonymization function in all cases. Under normal operating conditions and to the extent that users based in the EU are affected, a web server is located in the EEA, which is why IP anonymization is generally carried out within the EEA. In the present case, normal operating conditions were present.