It's definitely on the tax company for sending extraordinarily sensitive data to google analytics.
However I'd say sending sensitive (or at least private) data to google analytics is more or less its intended purpose. I don't think the use and continued existence of google analytics is compatible with any reasonable privacy protection.
However I'd say sending sensitive (or at least private) data to google analytics is more or less its intended purpose. I don't think the use and continued existence of google analytics is compatible with any reasonable privacy protection.