More than 200 organizations have trusted our team
Answers
CODE GxP

Is Google Analytics GDPR compliant?

It can be used in a GDPR-compliant way, but it is not compliant by default — correct configuration (consent mode, data retention settings, IP anonymisation where relevant) and a properly implemented consent banner are required, and this is a legal determination your data protection officer should confirm for your specific setup.

In detail

What "compliant" actually depends on

Why there is no universal yes or no

Google Analytics itself is a tool; whether a specific implementation is compliant depends on configuration, what data is collected, where it is processed, and whether consent is genuinely respected. A default installation is not compliant out of the box.

What correct configuration involves

Consent Mode v2 correctly gating data collection — see consent mode v2 explained — appropriate data retention settings, and technical implementation matched to what your DPO requires. See GA4 and consent mode for how we build and verify that specifically.

What we do not decide

Whether your specific implementation, market and data flows satisfy GDPR is a legal determination for your data protection officer. We implement the technical configuration to whatever they require.

Related questions
Not found your answer? Write to us

Related questions

Do we need a Data Processing Agreement with Google?

See what is a DPA and do I need one for that specific question, since the answer depends on what data is collected and how it is processed rather than being the same for every implementation. A DPA is one part of a compliant setup, not the whole of it.

Does our data have to stay in the EU?

Not automatically, and the requirement depends on your specific data flows, processor agreements, and what your organisation has already agreed to with its vendors. See does pharma data have to stay in the EU for how that question is answered and what configuration choices affect it.

Can you confirm our specific setup is compliant?

We can confirm the technical implementation is correctly configured to whatever your data protection officer specifies; the legal compliance determination itself sits with your DPO, not with us. Technical correctness and legal compliance are related but distinct, and we do not make the latter call.

What technical settings affect GDPR compliance in Google Analytics?

Consent Mode v2 correctly gating data collection before consent is given, data retention settings matched to what your DPO requires, and IP anonymisation where relevant are the main technical levers. See consent mode v2 explained for how these get configured and verified against your specific requirements.

CODE GxP

Check your Google
Analytics configuration

Tell us what you have and we will check whether it is technically configured correctly.

Tell us about your project See our work
contact us
Contact Form

Tell us
about your project

Tell us about your organization’s context and the planned scope of the project.
CODE GxP, as the data controller, will process your data in order to respond to the query and/or request you submit through this contact form. Privacy Policy.
Our site uses cookies to collect information about your device and browsing activity. We use this data to improve the site, ensure security and deliver personalized content. You can manage your cookie preferences by clicking here.
Accept cookies Configure Decline cookies
Basic cookie information
This website uses cookies and/or similar technologies that store and retrieve information when you browse. In general, these technologies can serve very different purposes, such as, for example, recognizing you as a user, obtaining information about your browsing habits or personalizing the way in which the content is displayed. The specific uses we make of these technologies are described below. By default, all cookies are disabled, except for technical ones, which are necessary for the website to function. If you wish to obtain more information or exercise your data protection rights, you can consult our Cookie Policy".
Accept cookies Configure
Technical cookies needed Always active
Technical cookies are strictly necessary for our website to work and for you to navigate through it. These types of cookies are those that, for example, allow us to identify you, give you access to certain restricted parts of the page if necessary, or remember different options or services already selected by you, such as your privacy preferences. Therefore, they are activated by default, your authorization is not necessary.Through the configuration of your browser, you can block or alert the presence of this type of cookies, although such blocking will affect the proper functioning of the different functionalities of our website.
Analytics cookies
Analytics cookies are used to analyse website behaviour anonymously. They help us measure activity and improve the website.
Confirm preferences
Title
Popupcontent
Contact us
CODE GxP, as the data controller, will process your data in order to respond to the query and/or request you submit through this contact form. Privacy Policy.
Aceptar