One of the questions in the "Test" provided by ICO, to check whether a DPO (Data Protection Officer) is required or not, is:

Do your organisation's core activities require regular and systematic monitoring of individuals on a large scale?
For example, tracking and monitoring individuals' behaviour, such as on the internet or on CCTV

If a Social website (similar to Twitter) uses Google Analytics to log user behavior (but non-identifiable), and manually logs the behavior of the users (such as "last activity/actions") only on the website (does not care, at all, about the behavior on other websites),
does it mean the website is monitoring individual's behavior on internet?

This question has an open bounty worth +50 reputation from Nuno ending tomorrow.

This question has not received enough attention.

Your Answer


By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.