GDPR compliance when Google Analytics is enabled

[mcserep]

Using Google Analytics in CodeCompass is optional, but when enabled, we shall fulfill the GDPR regulations.

Summarized:

To ensure that Google Analytics – its cookies, trackers and statistics tools – run in full compliance with EU’s General Data Protection Regulation (GDPR), you need to:

• Ask for and obtain end-user consent for all Google Analytics cookies on your website prior to their activation and operation.
• Control each Google Analytics cookie in order to only activate them after your users have given their explicit consent to them.
• Provide transparent information in your website’s cookie policy about the details of all Google Analytics cookies in operation – including their provider, technical details, duration and purpose. This is important as consent is only valid under the GDPR if it constitutes an informed choice on behalf of the users.
• Compile detailed information in your website’s privacy policy about all Google Analytics cookies on your domain, and what personal data your website processes in general.
• Turn on IP anonymization in your Google Analytics account and make sure that it uses pseudonymous identifiers.

Source: https://www.cookiebot.com/en/google-analytics-gdpr/