Google Analytics, GDPR, and user data privacy compliance;

GA gemmer ikke personhenfør data!

Last Updated on March 25, 2018 by Chris Christoff

On 25th of May 2018 the new General Data Protection Regulations (GDPR) will come into force. EU GDPR is the most important change regarding data privacy in over 20 years, causing all web data controllers and processors to re-consider how they manage, store, and transmit user data.

As many other web applications, Google Analytics is subject to these new regulations. Since Google Analytics Dashboard for WP (GADWP) is one of the most popular Google Analytics solutions for WordPress, in this documentation page we will try to guide you through some essential privacy features available on GADWP and some Google Analytics aspects. You may find these useful while preparing for GDPR compliance or other user privacy regulations. Please note that professional legal advice should always prevail any of the followings and that the information contained within this guide does not constitute and should not be taken as legal advice.

About EU General Data Protection Regulations (GDPR)

If you’re interested in specific details regarding GDPR or GDPR in general, we highly recommend visiting The FAQ section of the above mentioned website would be a pretty good starting point.

Things you should know about Google Analytics

According to Google Analytics terms of service (TOS), Analytics customers are prohibited from sending personal information to Google.

By default, the GADWP plugin doesn’t send this type of data to Google. If you customized the plugin or have extended its functionality to send any kind of personal information you should be aware that you are subject to account termination or data deletion. Personally identifiable information (PII) includes and is not limited to: names, social security numbers, email addresses, data that permanently identifies a particular device (such as a mobile phone’s unique device identifier if such an identifier cannot be reset), or similar data.

Regarding IP addresses (which can also be considered PII in certain circumstances), Google Analytics reports don’t include nor display such information.

You should also be aware that Google has now updated their Data Processing Amendment (DPA) to account for the General Data Processing Regulations (GDPR). To read and accept the DPA, follow these steps:

  • open
  • click on the Admin button; the Admin button has a gear symbol and can be found at the bottom left of your screen
  • select Account Settings
  • at the bottom of the screen review and accept the amendment accordingly