Iubenda logo
Start generating


Table of Contents

Google Analytics and the GDPR: Is It Considered Monitoring Behavior?

The short answer here is that it depends on what you’re doing with the raw data. “Monitoring” under the GDPR is referred to within the context of profiling:

In order to determine whether a processing activity can be considered to monitor the behaviour of data subjects, it should be ascertained whether natural persons are tracked on the internet including potential subsequent use of personal data processing techniques which consist of profiling a natural person, particularly in order to take decisions concerning her or him or for analysing or predicting her or his personal preferences, behaviours and attitudes.

So for example, if you were using Google Analytics (even with IP the anonymization feature in place), you can at least tell the region of users. This information coupled with user account details such as a company email address and /or age information can be used to infer further details such as average income, about an individual user, which can then be used in profiling.

Alternatively, if the raw anonymized Google Analytics data isn’t coupled with individual user data and is instead used statistically to give you general information about how users are using the website, then this is not considered “monitoring” behavior.

💡 To learn more about which EU cookie consent rules apply on a per-country basis, check out our Cookie Consent Cheatsheet here.

How iubenda can help

Regardless of which of the above-mentioned approaches you take, you must meet your disclosure requirements by having accurate and up-to-date information about the data you collect, the purpose, use and third-party processing in your privacy policy. Read more about the GDPR and its requirements here.

Our Privacy Policy Generator is affordable, available in several languages, lawyer crafted, customizable and self-updating (as it’s monitored remotely by our lawyers). It easily allows you to create a beautiful, precise privacy policy. Our 1700+ lawyer-crafted clauses and custom clause option makes it easy for you to comply with even the strictest requirements.


For more information on privacy policies click here

Our privacy policies also comes with the option to include a cookie policy (which is likely necessary if you’re using Google Analytics as under the Cookie Law, whether statistical third-party cookies are exempt from consent requirements may depend on the law of the individual member state )

This also means that our Cookie Solution for the Cookie Law will also be useful to you. Our comprehensive Cookie Solution which simplifies compliance with provisions of the European Cookie Law. It’s an easy to run cookie policy and cookie consent solution (including banner management), that’s fast and does not require heavy investments.


For more information on our Cookie Solution click here.

You can read more about our GDPR solutions or read all our compliance solutions here or click below to start generating.

See also