Important updates on Google Analytics Data Retention and the General Data Protection Regulation (GDPR)
-
Hi Everyone,
I'm sure many of you received the email from Google over the past few days with the subject line: [Action Required] Important updates on Google Analytics Data Retention and the General Data Protection Regulation (GDPR).
I hope I'm not alone in not knowing what exactly this whole notification was in regards to. I realize it's for Data but are we no longer able to pull stats from the past? If anyone has a "dumbed down" explanation for what this update entails, I would be very interested - I don't want to miss out on any important updates and info, but I'm just not grasping this content. Below is the full email in its entirety for those who are interested as well:
Dear Google Analytics Administrator,
Over the past year we've shared how we are preparing to meet the requirements of the GDPR, the new data protection law coming into force on May 25, 2018. Today we are sharing more about important product changes that may impact your Google Analytics data, and other updates in preparation for the GDPR. This e-mail requires your attention and action even if your users are not based in the European Economic Area (EEA).
Product Updates
Today we introduced granular data retention controls that allow you to manage how long your user and event data is held on our servers. Starting May 25, 2018, user and event data will be retained according to these settings; Google Analytics will automatically delete user and event data that is older than the retention period you select. Note that these settings will not affect reports based on aggregated data.
Action: Please review these data retention settings and modify as needed.
Before May 25, we will also introduce a new user deletion tool that allows you to manage the deletion of all data associated with an individual user (e.g. site visitor) from your Google Analytics and/or Analytics 360 properties. This new automated tool will work based on any of the common identifiers sent to Analytics Client ID (i.e. standard Google Analytics first party cookie), User ID (if enabled), or App Instance ID (if using Google Analytics for Firebase). Details will be available on our Developers site shortly.
As always, we remain committed to providing ways to safeguard your data. Google Analytics and Analytics 360 will continue to offer a number of other features and policies around data collection, use, and retention to assist you in safeguarding your data. For example, features for customizable cookie settings, privacy controls, data sharing settings, data deletion on account termination, and IP anonymization may prove useful as you evaluate the impact of the GDPR for your company’s unique situation and Analytics implementation.
Contract And User Consent Related Updates
Contract changes
Google has been rolling out updates to our contractual terms for many products since last August, reflecting Google’s status as either data processor or data controller under the new law (see full classification of our Ads products). The new GDPR terms will supplement your current contract with Google and will come into force on May 25, 2018.
In both Google Analytics and Analytics 360, Google operates as a processor of personal data that is handled in the service.
• For Google Analytics clients based outside the EEA and all Analytics 360 customers, updated data processing terms are available for your review/acceptance in your accounts (Admin ➝ Account Settings).
• For Google Analytics clients based in the EEA, updated data processing terms have already been included in your terms.
• If you don’t contract with Google for your use of our measurement products, you should seek advice from the parties with whom you contract.
Updated EU User Consent Policy
Per our advertising features policy, both Google Analytics and Analytics 360 customers using advertising features must comply with Google’s EU User Consent Policy. Google's EU User Consent Policy is being updated to reflect new legal requirements of the GDPR. It sets out your responsibilities for making disclosures to, and obtaining consent from, end users of your sites and apps in the EEA.
Action: Even if you are not based in the EEA, please consider together with your legal department or advisors, whether your business will be in scope of the GDPR when using Google Analytics and Analytics 360 and review/accept the updated data processing terms as well as define your path for compliance with the EU User Consent Policy.
Find Out More
You can refer to privacy.google.com/businesses to learn more about Google’s data privacy policies and approach, as well as view our data processing terms.
We will continue to share further information on our plans in the coming weeks and will update relevant developer and help center documentation where necessary.
Thanks,
The Google Analytics Team -
hahahaha
-
Ok so as someone who grew up in N. WI, I gotta know - when you made the ice cream analogy, were you picturing more Dan's Minocqua Fudge, or rather a different frozen treat / ala Gille's or Kopp's?
I ask the important questions.
-
Hey guys, we're going through this at my agency and I can break down a couple of things.
1. There is a data retention setting in Google Analytics. On May 25th (this Friday) that's going to change from indefinite to 26 months by default. This will affect past data and reports as outlined by Google. You should expect that data to go away if you do not change those settings.
2. Answering questions regarding GDPR or providing advice on the topic to clients is tantamount to providing legal advice, which we cannot do. For us, we are consulting with our lawyers, and recommending that our clients seek legal advice as well. We are opting not to change any settings or accept any addendums or agreements without consulting a lawyer first or without specific direction from the client to make a change on the client's behalf. Accepting new terms or policies without first consulting the client essentially means you're liable if they make a mistake, because you accepted it, not them.
3. Yes, the European legislation is affecting everyone, some more directly than others. Even if your only client is an ice cream shop in Wisconsin, it still affects you because big players like Google are pushing the legal burden of compliance off of themselves and onto their users. For example, Google gives out some warnings, puts up some banners, and changes their default settings and now they're compliant, but they make some compliance issues opt-in, opt-out for their end user. And Google won't give much advice on this because it's tantamount to providing legal advice.
Hope that helps. It's not a fun topic.
-
This is by far the best layman terms breakdown that I've read on the new GDPR and what it means for both EU and non-EU websites. Wanted to share to see what you all thought: https://www.socialmediaexaminer.com/how-gdpr-impacts-marketers/
-
I found https://www.sidley.com/-/media/publications/cslp-september-2016-1516.pdf helpful.
Essentially, unless you have a specific reason/need to store this personal information (aggregate data isn't affected), you need to minimize your personal data retention period.
-
Does anyone have an updated recommendation of what is the proper setting? In my research some say to keep it minimal to minimize risk. Others have said to not let it expire.
What is the recommendation? Any additional thoughts here?
-
Thumbs up to this question. Most articles I've read simply quote the same thing that's stated on the Google support page.
I did log into my accounts and saw that there is a "Do not automatically expire" option, so is this option going away after May 25th? If not, my assumption is that this is an update to give account owners a way to manage how long user data is stored in order to meet/resolve potential data compliance issues.
It also notes that this update will not affect aggregate reporting, so I'm wondering how this will affect things going forward.
-
"we are being asked to go in and choose a setting for the retention period from the following: 14 Months, 26 Months, 38 Months, 50 Months, and 'Do not automatically expire'"
Is this one size fits all or company specific. Do you need to select the one that makes the company in question compliant, or do we just need to pick one?
-
I've been thinking exactly the same thing all day. What does this mean in practical terms.
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Google Trends Data Weird Since 1/1/2022
I am finding several instances of weird data drop offs on Google Trends at 1/1/2022. It seems like it's for data associated with a type/category as opposed to a search term. Here are some examples of "search interest" dropping suddenly off to next-to-nothing for prominent brands. Patagonia / clothing company Lands' End / clothing company Carhartt / workwear company Example screenshot.Capture.PNG Does anyone know what the cause of this is? Has Google stated anything directly about why the data suddenly changed so significantly?
Reporting & Analytics | | LivDetrick0 -
Attribution of conversions to payment gateway in Google Analytics
Hi all, We have been having a problem for a while now where most transactions are attributed to referrals from our payment gateway Sagepay. The issue started a couple of months ago, when we finally upgraded our website to https:// for logged in users and transactions. Before, when we were using http://, transactions were attributed to the correct channel. Even weirder, we upgraded 4 websites and only 2 of them have the issue now, the other two continue to attribute transactions correctly. I added Sagepay to the referral exclusion list which made no difference. Over the weekend, we upgraded to the global site tag and it seems to have improved somewhat, but yesterday 50% of transactions were still attributed to referral/sagepay. I am also seeing an odd issue, where for half of the transactions, the revenue and transaction are attributed to one channel, but the products (quantity) are attributed to another. One of the channels is always referral/sagepay and the other is the channel that the transaction should be attributed to. Has anyone seen this issue before? I'd appreciate any tips that might help us fix this issue. Thanks in advance!
Reporting & Analytics | | ViviCa10 -
How do I setup a logged-in vs. non logged-in custom variable in Google Analytics?
I found an example of the snippet to use: __gaq.push(['.setCustomVar,
Reporting & Analytics | | Evan34
1, // first slot
'user-type', // custom variable name
'visitor', // custom variable value
2 // custom variable scope - session-level
]); Once the visitor logs into your website, we change this code, accordingly: __gaq.push(['.setCustomVar,
1, // first slot
'user-type', // custom variable name
'regular-user', // custom variable value
2 // custom variable scope - session-level
]); How does the code know to change from 'visitor' to 'regular user' once a user logs in? Is the snippet only placed on the login page?0 -
Some goal conversion in Google analytics showing under referral
Yesterday I have created Google analytics account for a new website but few goal conversions comes from payment gateway site (paypal.com, epdq.co.uk) and showing under referral. How to fix this issue so I can know the real source of Goal conversion. *Note - utm_nooverride=1 on thank you page applied, payment gateway URL is already placed in Referral Exclusion List. So please don't suggest either of them. Thanks
Reporting & Analytics | | Alick3000 -
Advanced Segment on Google Analytics
Hello there, hope everyone is allright and rockin' the SEO world 🙂 Was wondering if anyone could give a tip on how to configure an 'Advanced Segment' on Google Analytics. Basically I need to isolate traffic for 4 specific subfolders. E.g. www.mywebsite.com/solutions/A www.mywebsite.com/solutions/B www.mywebsite.com/solutions/C www.mywebsite.com/solutions/D/part1 Please note that the website has more pages under the specific section. E.g www.mywebsite.com/solutions/Z www.mywebsite.com/solutions/D/part2 but I only need to isolate the 4 directories (and their own sub-folders) mentioned above. Any idea how I could do this? Thanks a lot Joe
Reporting & Analytics | | Joseph.Volcy0 -
Cross domain tracking setup in Google Analytics
I really need help on this, I can't figure it out. I need to track a few subdomains and and couple of seperate domains in one profile in Google Analytics. So I have: www.maindomain.co.uk sub1.maindomain.co.uk sub2.maindomain.co.uk www.anotherdomain.co.uk So the code I have placed on all of these domains is as following: I have then set up seperate profiles which filter out the data by domain. E.g. for sub1.maindomain.co.uk, I have user the fitler: Custom filter > Include > Filter Field = Hostname > Filter Pattern = sub1.maindomain.co.uk For the www.anotherdomain.co.uk, I have used the same filter. Now this all seems to be tracking visits and unique visitors okay, but I always have a very low pageview count, less than visits and sometimes zero. Could anyone shed any light on what I am doing wrong? Thanks in advance mozzers.
Reporting & Analytics | | MirandaP0 -
Google Analytics and backlinking
Let say I have my main site and my secondary site that is optimized for a slightly different set of keywords (nonetheless still relevant to my main site). I have several links from a secondary site to my main site. Secondary site is on a different C-block. Do you ladies and gentlemen think that if I put both websites under the same google analytics account, Google is going to penalize me or remove some of the juice that is flowing from secondary site to the main site because it would detect through GA that both sites belong to the same entity?
Reporting & Analytics | | SirMax0 -
View entrance keyworsd for a subpage in google analytics
I have an element from ringcentral that is tracked by google analytics, yet for the life of me I cannot figure out to how to view the entrance keywords to that element. I can view the search metric and see which keywords and how many visits from each keyword onto the site in general, but how do I see which keywords were actually responsible for this 'click to call' code which has GA? I can see the total number of clicks into that code, but not which keywords led to it.
Reporting & Analytics | | ilyaelbert0