How to make Google Analytics GDPR compliant

Google Analytics is a third party plugin used to retain user preferences, store information for things like shopping carts, and provide tracking data. To keep track of how visitors use websites, which pages they visit, etc., cookies are used. The collected info helps to improve websites, create new content, detect errors, optimise navigations, increase accessibility, ..

As a rule, cookies will make your browsing experience better.

In order to be compliant with GDPR and to be able to place these analytical cookies, you must meet the following conditions:

Accept the Data Processing Amendment

  • Log in with your webmaster account to Google Analytics.
  • Click Admin in the left column.
  • Then click Account Settings.
  • Scroll to the bottom of the page to Under Data Processing Amendment.
  • Click Review Amendment.
  • After you review the amendment, click Done.
  • Click Done again to save your account settings.

Process IP addresses anonymously

With the MonsterInsights plugin

  • Go to settings.
  • Click tracking.
  • Choose Demographics.
  • And select Anonymize IP addresses.

With the Trackingcode from Google Analytics

  • Log in with your webmaster account.
  • Choose Admin.
  • Then Tracking info and then Tracking code.
  • You will now see an example of a global site tag (gtag.js) that you can add to the <HEAD> section of your web page.

  • In this example, add {‘anonymize_ip’: true} as the configuration option as in the example below.

Please note: Make a screenshot with date and time as soon as this line has been added to the website’s source code. In case you need to demonstrate when this privacy-friendly measure has been applied.

Do not share data with Google

  • Log in with your webmaster account.
  • Choose Admin.
  • Then Account settings.
  • Uncheck the five boxes (Google products & services, Benchmarking, Technical support, access for Google-Account specialists).
  • Do not forget to click save.

Do not collect data for advertising features

  • Log in with your webmaster account.
  • Choose Admin.
  • Then Tracking info and then Data collection.
  • Disable Data collection for Remarketing and Advertising Reporting Features.
  • Don’t forget to save your settings.

Last but not least: Inform users about the use of Google Analytics.

Let the visitor know that:

  • Google Analytics uses cookies;
  • a Data Processing Amendment has been signed;
  • the data are processed anonymously;
  • data sharing is disabled;
  • no other Google services are used in combination with Google Analytics cookies.

If you want more information on how to make your website GDPR compliant, don’t hesitate to contact our Data Officer at dpo@appsaloon.be or +32 11 123 589.