Is Google Analytics compliant with GDPR?


GDPR (General Data Protection Regulation) is set to revolutionize how we process and store data in the digital age, with the aim of giving individuals more control of their personal data.

Google Analytics will act as the data processor and your organization as the data controller since your organization is in control of what data you send to Google Analytics once the Universal Analytics tracking code implementation is up and running.

This article will explore the steps Google Analytics is taking to become GDPR compliant, as well as what your business can do to make sure you too are compliant with GDPR.

What steps is Google taking?

Google recently released a statement declaring their commitment to compliance with data protection laws in line with GDPR. Google went on to explain that they have measures in place relating to privacy and data processing. For a comprehensive look at Google’s processing terms, you can learn more by reading their Google Ads Data processing terms, which is set to replace and supersede the Analytics Data Processing Amendment.

Google encourages data controllers to be vigilant about how they collect and handle data. Numerous GDPR-related guides online can help you to ensure you are knowledgeable about GDPR and the effects it could have on your company.

Google has updated Google Analytics with a new feature called ‘User and event data retention’. This feature allows the data controller to decide how long to store and retain data.

The feature relates specifically to data associated with cookies, user identifiers, or advertising identifiers. As the data controller, you can set a fixed time limit before expiry. You can also choose not to include an automatic expiry time limit.

The ‘User and event data retention’ feature is set to come into play on May 25— the day when GDPR regulations hit.

Share this article
  • Facebook0
  • Linkedin0
  • Google+0
  • Twitter
Related articles
Facebook’s ‘Clear History’ could be a boon for organic search marketing
The top 10 tools for getting an insight into your website analytics
Five ways to use predictive analytics
How to reduce your site"s bounce rate

Google recently released a statement on the topic:


We have all opened emails and messages like this one lately regarding GDPR updates. Moreover, you might be tempted to ignore or delete it without paying it much attention. However, we strongly urge you to take your time to read the email that Google sent, and to review your user and event data retention setting in Google Analytics.

GDPR means securing your website is more important than ever

A great way to help secure your users’ data is to install an SSL certificate for your website. Adding a secure sockets layer certificate helps ensure that all data sent between the web server and the browser is secure. An SSL certificate also comes with the added bonus of being a ranking factor in Google’s SERPs.

Securing your website and securing client data is vital. Non-compliance could lead to hefty fines of up to €20 million or 4% of annual turnover, whichever is the greater sum.

We know that many readers here at Search Engine Watch use a WordPress CMS for their websites.

If you use a WordPress website, we suggest that you make sure all of your plugins are up-to-date. You should also install plugins such as Wordfence and WP Limit Login Attempts.

For a comprehensive guide to securing a WordPress website, see here.


Want to stay on top of the latest search trends?Get top insights and news from our search experts.
Related reading
A guide to the standard reports in Google Analytics: Audience reports

We"ve set out to tackle the ambitious task of explaining each segment of Google Analytics and the standard reports they contain. In this instalment, we’re going to look at Audience Reports: what you can learn from them, and how you can get the most out of the data that they offer.

Analytics 29 Mar 18 | Rebecca Sentance
How to set up event tracking in Google Analytics

Event tracking is one of the most useful features in Google Analytics. With just a little bit of extra code, you can capture all kinds of information about how people behave on your site. Event tracking lets you monitor just about any action on your site that doesn’t trigger a new page to load, giving invaluable data for improving your site.

Analytics 19 Mar 18 | Amanda DiSilvestro
7 Google Tag Manager courses to prioritize in 2018

If you love data (and what marketing expert doesn"t?), then learning Google Tag Manager should be high on your priority list this year. But getting started with GTM isn"t always an intuitive process. Here are seven courses that can help you get the hang of it, and take charge of your data.

Analytics 15 Mar 18 | Amanda DiSilvestro
A guide to the standard reports in Google Analytics: Real-time reports

In this series, we’re going to tackle the gargantuan task of explaining each segment of Google Analytics and the standard reports they contain. We’ll cover the data you can find within each standard report, and how it can be used in your marketing and SEO efforts. First up are Real-Time Reports: how do they work, and what kinds of campaigns are they useful for?

Analytics 01 Mar 18 | Rebecca Sentance