{"id":6957,"date":"2020-09-04T09:17:09","date_gmt":"2020-09-04T09:17:09","guid":{"rendered":"https:\/\/e-cens.com\/?p=6957"},"modified":"2024-10-29T15:05:39","modified_gmt":"2024-10-29T15:05:39","slug":"google-analytics-tracking-do-you-need-consent","status":"publish","type":"post","link":"https:\/\/e-cens.com\/blog\/google-analytics-tracking-do-you-need-consent\/","title":{"rendered":"GDPR Compliance for Google Analytics: Tracking &amp; Consent"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"6957\" class=\"elementor elementor-6957\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-36cc892 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"36cc892\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-da4b52e\" data-id=\"da4b52e\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-71fd0d4c elementor-widget elementor-widget-text-editor\" data-id=\"71fd0d4c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-6969 size-medium\" src=\"https:\/\/e-cens.com\/wp-content\/uploads\/2020\/09\/Temp-featured-google-analytics-tracking-gdpr-1-300x300.png\" alt=\"Google Analytics Tracking is a powerful tool, but it is essential to comply with GDPR during its implementation\" width=\"300\" height=\"300\" \/><\/h2><h2><span style=\"font-weight: 400;\">Google Analytics \u2013 The Most Popular Web Analytics To<\/span><span style=\"font-weight: 400;\">olse<\/span><span style=\"font-weight: 400;\">t<\/span><\/h2><p><span style=\"font-weight: 400;\">Most organizations are now tapping into Google Analytics analytics&#8217;s power to track and improve their business goals. However, the explosion of web analytics is associated with a host of legalization. In this article, we will look at the General Data Protection Regulation (GDPR), and how your analytics strategy plays into that. If you&#8217;ve not come across the GDPR, it may help to <\/span><a href=\"https:\/\/www.wired.co.uk\/article\/what-is-gdpr-uk-eu-legislation-compliance-summary-fines-2018\" rel=\"noopener noreferrer\" target=\"_blank\"><span style=\"font-weight: 400;\">read an overview<\/span><\/a><span style=\"font-weight: 400;\"> of the regulation. We focus specifically on using Google Analytics, which is among the most popular tools for web analytics.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p><h2><span style=\"font-weight: 400;\">What is GDPR compliance?<\/span><\/h2><p><span style=\"font-weight: 400;\">The GDPR came into force on the 25th of May 2018. It extended the Data Protection Act, providing further data privacy rights to citizens in the EU. It is now vital in many jurisdictions to obtain consent to use the tracking features provided by Google Analytics. This means that best practice is to ask web-visitors to opt-in as per the regulations. Unfortunately, this does mean that you&#8217;ll likely miss out on capturing data from your visitors, as not all will decide to opt-in.<\/span><\/p><p><span style=\"font-weight: 400;\">Now let&#8217;s look at <\/span><b>gaining consent for using tracking features in Google Analytics.\u00a0<\/b><\/p><p><span style=\"font-weight: 400;\">The <\/span><a href=\"https:\/\/support.google.com\/analytics\/answer\/9019185?hl=en\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">official Google Analytics support<\/span><\/a><span style=\"font-weight: 400;\"> webpage specifically notes:\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">\u201cWhen using Google Analytics Advertising Features, you must also comply with the European Union User Consent Policy.\u201d<\/span><\/p><p><span style=\"font-weight: 400;\">This resource assists users to comply with GDPR and CCPA when implementing Google&#8217;s Analytics services.\u00a0<\/span><\/p><p style=\"text-align: right;\"><span style=\"font-weight: 400;\">Are you interested in taking your analytics capabilities to the next level? Get in touch with <\/span><a href=\"https:\/\/e-cens.com\/contact-us\/\" target=\"_blank\" rel=\"noopener noreferrer\"><span style=\"font-weight: 400;\">e-CENS<\/span><\/a><span style=\"font-weight: 400;\"> and use data to transform your business.<\/span><\/p><p style=\"text-align: right;\"><span style=\"font-weight: 400;\">\u00a0<\/span><\/p><h2><span style=\"font-weight: 400;\">Interpreting Google&#8217;s Requirement for a Compliant Implementation of Google Analytics<\/span><\/h2><p><span style=\"font-weight: 400;\">In interpreting Google\u2019s statement, it is clear that if your organization has enabled the Advertising Features in Google Analytics, you will most likely need consent from EU citizens. However, you may be wondering how Google defines &#8216;Advertising Features&#8217;, and we will take a closer look at this. Advertising Features can include any of the following:<\/span><\/p><ul><li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">If you are using Analytics Demographics as well as Interest Reporting<\/span><\/li><li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">When remarketing is used within Google Analytics<\/span><\/li><li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">If you use Google Display Network Impression Reporting\u00a0<\/span><\/li><li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Any integrated services that might require Google Analytics to retrieve data for advertising \u2013 which includes any data that might be fetched through advertising <\/span><a href=\"https:\/\/e-cens.com\/blog\/gdpr-ccpa-privacy-and-cookie-consent-management\/\"><span style=\"font-weight: 400;\">cookies<\/span><\/a><span style=\"font-weight: 400;\"> and identifiers.\u00a0<\/span><\/li><li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Google Signals to enable Cross Device features will also require consent.\u00a0<\/span><\/li><\/ul><p><span style=\"font-weight: 400;\">However, it must be noted that if you <\/span><b><i>don&#8217;t use<\/i><\/b><span style=\"font-weight: 400;\"> any Advertising Features alongside Google Analytics, then there is no need for consent, and you can browse the advice on this below. <\/span><\/p><p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6958\" src=\"https:\/\/e-cens.com\/wp-content\/uploads\/2020\/08\/GACapture-1.png\" alt=\"Google Analytics is a powerful tool in your web analytics toolkit.\" width=\"494\" height=\"409\" \/><\/p><h2><span style=\"font-weight: 400;\">\u00a0<\/span><\/h2><h2><span style=\"font-weight: 400;\">Other Reasons Why Consent May be Required\u00a0<\/span><\/h2><p><span style=\"font-weight: 400;\">As well as taking into account Google\u2019s recommendations around consent and Advertising Features, you might also wish to gain consent in these scenarios:<\/span><\/p><ul><li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">When you collect geographic data\u00a0<\/span><\/li><li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">If you collect any pseudonymous identifiers<\/span><\/li><li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Collection of User IDs<\/span><\/li><\/ul><h3><span style=\"font-weight: 400;\">\u00a0<\/span><\/h3><h3><span style=\"font-weight: 400;\">Pseudonymous Identifiers and User IDs<\/span><\/h3><p><span style=\"font-weight: 400;\">If personally-identifiable information (PII) is collected, then this will go against Google Analytics\u2019s Terms of Service. It is important to note that the data is classed as PII if it can identify a visitor. However, it must be noted that pseudonymous identifiers such as User IDs do not count as PII. You can also browse the <\/span><a href=\"https:\/\/support.google.com\/analytics\/answer\/6366371?hl=en\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Google Analytics support website<\/span><\/a><span style=\"font-weight: 400;\">, which provides information on how to encrypt PII by utilizing the SHA256 hashing requirement. <\/span><span style=\"font-weight: 400;\">\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">Under GDPR, personally identifiable information includes both direct identifiers and indirect identifiers such as IP addresses, so you should implement IP anonymization.\u00a0<\/span><\/p><h2><span style=\"font-weight: 400;\">\u00a0<\/span><\/h2><h2><span style=\"font-weight: 400;\">Google and Data Sharing\u00a0<\/span><\/h2><p><span style=\"font-weight: 400;\">Google might sometimes ask you to share your analytics data so that it can improve its services and may also provide access to your account to specialists who might look for data opportunities. We don&#8217;t recommend that you share your data as you are unlikely to benefit from it. It also raises concerns around your own compliance with GDPR, so this is not a recommended option. However, the benchmarking settings are anonymous and are actually beneficial to your organization. They are likely to be compliant with GDPR.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">In your analytics dashboard, we recommend navigating to &#8216;Account Settings&#8217; in the admin area and carefully exploring all of the options and being aware of them.\u00a0<\/span><\/p><h2><span style=\"font-weight: 400;\">\u00a0<\/span><\/h2><h2><span style=\"font-weight: 400;\">Our Tips for Using Google Analytics Going Forward<\/span><\/h2><p><span style=\"font-weight: 400;\">This post has provided an introduction and overview of areas that might need user consent when using tracking features in Google Analytics. It is common practice to collect data in Google Analytics for your whole audience. To comply with GDPR, it is advisable to implement \u2018Advertising Features\u2019 for those users that opt-in \u2013 which will enable remarketing, demographics, Google Signals, as well as a host of other interesting features.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">The legislative environment is in constant evolution, so we recommend keeping up-to-date with developments around the world.\u00a0<\/span><\/p><h2><span style=\"font-weight: 400;\">\u00a0<\/span><\/h2><h2><span style=\"font-weight: 400;\">Disclaimer \u2013 Declaration of interest<\/span><\/h2><p><span style=\"font-weight: 400;\">We are not impartial observers of the impact of legislation on our customer&#8217;s regulatory environment. Here at e-CENS, we are analytics specialists, offering expertise in selecting and tailoring our client\u2019s analytics solutions.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">If you are ready to take a deep dive into Google Analytics, <\/span><a href=\"https:\/\/e-cens.com\/contact-us\/\"><span style=\"font-weight: 400;\">contact us.<\/span><\/a><span style=\"font-weight: 400;\"> We support the end-to-end cycle of implementing Google Analytics, through to your consumer targeting \u2013 while ensuring that you are compliant in your regulatory environments, whether global or local.<\/span><\/p><h2>\u00a0<\/h2><h2>Further Reading<\/h2><p>If you want to learn more about the various legislative ecosystems and how they impact on digital marketing, see our article on <a href=\"https:\/\/e-cens.com\/blog\/gdpr-ccpa-privacy-and-cookie-consent-management\/\">GDPR, CCPA \u2013 Privacy and Cookie Consent Management<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Google Analytics \u2013 The Most Popular Web Analytics Toolset Most organizations are now tapping into Google Analytics analytics&#8217;s power to track and improve their business goals. However, the explosion of web analytics is associated with a host of legalization. In this article, we will look at the General Data Protection Regulation (GDPR), and how your [&hellip;]<\/p>\n","protected":false},"author":18,"featured_media":7067,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_eb_attr":"","content-type":"","ub_ctt_via":"","footnotes":""},"categories":[20,18],"tags":[],"class_list":["post-6957","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-google-analytics","category-web-analytics"],"acf":[],"featured_image_src":"https:\/\/e-cens.com\/wp-content\/uploads\/2020\/09\/Do-You-Need-Consent.png","author_info":{"display_name":"Sunil Attri","author_link":"https:\/\/e-cens.com\/author\/sunil\/"},"_links":{"self":[{"href":"https:\/\/e-cens.com\/wp-json\/wp\/v2\/posts\/6957","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/e-cens.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/e-cens.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/e-cens.com\/wp-json\/wp\/v2\/users\/18"}],"replies":[{"embeddable":true,"href":"https:\/\/e-cens.com\/wp-json\/wp\/v2\/comments?post=6957"}],"version-history":[{"count":3,"href":"https:\/\/e-cens.com\/wp-json\/wp\/v2\/posts\/6957\/revisions"}],"predecessor-version":[{"id":31487,"href":"https:\/\/e-cens.com\/wp-json\/wp\/v2\/posts\/6957\/revisions\/31487"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/e-cens.com\/wp-json\/wp\/v2\/media\/7067"}],"wp:attachment":[{"href":"https:\/\/e-cens.com\/wp-json\/wp\/v2\/media?parent=6957"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/e-cens.com\/wp-json\/wp\/v2\/categories?post=6957"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/e-cens.com\/wp-json\/wp\/v2\/tags?post=6957"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}