One of the questions in the "Test" provided by ICO, to check whether a DPO (Data Protection Officer) is required or not, is:
Do your organisation's core activities require regular and systematic monitoring of individuals on a large scale?
For example, tracking and monitoring individuals' behaviour, such as on the internet or on CCTV
If a Social website (similar to Twitter) uses Google Analytics to log user behavior (but non-identifiable), and manually logs the behavior of the users (such as "last activity/actions") only on the website (does not care, at all, about the behavior on other websites),
does it mean the website is monitoring individual's behavior on internet?