1

I'm wondering if anyone can shed any light on this for me please. I've been doing alot of research about GDPR lately and how it is going to effect my websites using Google Analytics.

From what I can understand, any website which uses Google Analytics needs to first get the users consent before storing a cookie on their browser?

I have implemented this in a cookie notice when the user first goes to the site and by default no tracking is enabled. Once they click agree, the page reloads with Analytics tracking.

However, since I have implemented this onto my websites the drop in traffic is huge and really makes it hard to optimise and understand how the website is performing.

My question is, Is it ok if in my cookie notice text said something like this..

'By clicking agree or continuing to use this site you agree to our privacy policy'

This way if they completely ignore the notice (which a lot of people do) and navigate to another page, then at least I am able to track more visits.

Is this still considered clear consent?

1

'By clicking agree or continuing to use this site you agree to our privacy policy'

Neither of theses options is considered clear consent.

  • Continuing to use the site, is implied consent, which is not sufficient. Also it does not give you the option to reject.
  • Clicking agree to agree the privacy policy is not specific enough. You must offer a separate opt-in box for everything for which you need consent. The privacy policy is just a text in which you explain your privacy policy. It is not a contract which needs agreement.
  • Also keep in mind that withdrawal of consent must be as easy as giving it. So you must be able to return to the settings and change them.

Having said that, it is possible to configure Google Analytics in a way you don't need consent;

  1. Accept the Data Processing Amendment
    • Go to Admin
    • Choose Account Settings
    • Scroll down to the data processing amendment
    • Accept it
    • Click Save
  2. Disable Data Sharing
    • Go to Admin
    • Choose Account Settings
    • Scroll down to the data sharing settings
    • Uncheck all checkboxex
    • Click Save
  3. Disable Data Collection for Advertising
    • Go to Admin
    • Choose Account Settings
    • Choose Property settings
    • Choose Tracking info
    • Choose Data collection
    • Turn off these two options
    • Click Save
  4. Disable the User-ID feature
    • Go to Admin
    • Choose Account Settings
    • Choose Property settings
    • Choose Trackinginfo
    • Choose User-ID
    • Turn off these options
    • Click Save
  5. Anonymize your visitors IP Address
    • Add { ‘anonymize_ip’: true } to the tracking code on your website

Even though you don't need consent, you still need to add a few lines to your privacy policy:

  • You are using Google Analytics cookies.
  • You have a data processing agreement with google.
  • You have enabled IP anonymization/masking.
  • You have disabled data sharing.
  • You are not using any other google services in combination with Google Analytics.

The Dutch DPA has a more complete manual, but unfortunately it is not available in English.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.