Define the specific business questions the measurement needs to answer first, then build tracking around consent-respecting analytics that is honest about what it cannot capture, rather than treating a full analytics dashboard as complete visibility.
A generic analytics setup produces a lot of numbers and answers few specific business questions. Defining what you actually need to know — is this content reaching HCPs, is the portal being used, is the campaign converting — should come before configuring any tool.
Health-related sites typically see lower consent rates than general e-commerce, which means a meaningful share of visitors are simply not trackable. See GA4 and consent mode for how measurement is built to be honest about that gap rather than implying completeness it cannot deliver.
Engagement within verified portals (more reliable than anonymous public tracking), conversion where tracking permits, and technical health metrics like Core Web Vitals — see analytics and tracking for the fuller measurement architecture.
Health-related sites typically see lower consent than general e-commerce, since visitors researching medical topics are more cautious about tracking. That is expected, not a sign something is broken, and comparing against e-commerce benchmarks will always look discouraging. Compare instead against similar healthcare or pharma sites, where the gap is normal.
It can be, but not by default; correct configuration and a properly implemented consent banner are required, and this is ultimately a legal determination your data protection officer should confirm. See is Google Analytics GDPR compliant for the fuller answer on what compliant configuration involves.
No, and any setup promising that either overstates what it delivers or under-respects consent. The honest goal is the best possible picture within what visitors agreed to share, combined with metrics, like portal engagement, that do not depend on tracking consent at all, and treating that as sufficient.
Server-side metrics that do not depend on visitor consent, such as page requests, document downloads, and Core Web Vitals, still give a useful picture. Engagement inside verified HCP portals is also more reliable than anonymous public tracking, since portal users have already authenticated. See analytics and tracking for how these combine.
Tell us what you need to know and we will tell you what is actually measurable.