largely follows DSB Austria
also in English:
https://www.cnil.fr/en/use-google-analytics-and-data-transfers-united-states-cnil-orders-website-manageroperator-comply#
The actual decision:
https://www.cnil.fr/sites/default/files/atoms/files/med_google_analytics_anonymisee.pdf