Free GDPR Compliance Tool
Google Analytics GDPR Checker
Find out if Google Analytics is properly configured on your website. Detect consent issues, missing Consent Mode v2, and potential GDPR violations in seconds.
Free · No account required · Results in under 30 seconds
Google Analytics is the world's most popular web analytics tool — and one of the most common sources of GDPR violations for European websites. The problem isn't Google Analytics itself, but how it's implemented. Our scanner checks the specific signals that regulators and auditors look for when assessing GA compliance.
What the scanner checks for Google Analytics
GA tracking before consent
We check if Google Analytics fires before a user accepts cookies. If it does, you're collecting data without a legal basis.
Consent Mode v2 implementation
We detect whether Google's Consent Mode v2 is properly configured — required for smart bidding and accurate GA4 reporting since March 2024.
Google Tag Manager detected
We detect whether Google Tag Manager is present on your site — a key factor in controlling when GA4 scripts load and how consent signals are applied.
Cookie banner presence
We check whether your site displays a cookie consent banner before any tracking begins.
Cookies set before consent
We detect any cookies or tracking pixels that fire before user consent is given — a clear GDPR violation.
Privacy Policy present
We check whether your website has an accessible Privacy Policy — required when using Google Analytics, which must be disclosed as a data processor under GDPR Art. 13.
Third-party data transfers
We flag data transfers to US-based services like Google, which require specific legal safeguards under GDPR Chapter V.
Is Google Analytics GDPR compliant?
Google Analytics by itself is not inherently illegal under GDPR. However, using it without proper safeguards is. Several EU Data Protection Authorities — including those in Austria, France, Italy, and Denmark — have ruled that using Google Analytics without adequate protection violates GDPR because it transfers personal data (IP addresses, browser fingerprints) to the United States without a valid legal basis.
- •IP addresses are classified as personal data under GDPR
- •Google Analytics stores data on US servers by default
- •Without Consent Mode, GA fires on page load — before any consent is given
- •Failing to block GA before consent is the most common reason for GDPR fines related to analytics
What changed with Google Consent Mode v2?
In March 2024, Google required all advertisers using Google's advertising features (GA4 with Google Ads, remarketing, etc.) to implement Consent Mode v2. This changes how Google Analytics behaves when a user declines tracking.
- •Basic mode: GA pings Google with 'consent denied' signals but sends no personal data
- •Advanced mode: enables behavioural modelling for opted-out users
- •Without Consent Mode v2, Google may limit smart bidding and audience features
- •Even if you don't use Google Ads, Consent Mode v2 is best practice for GDPR compliance
How to make GA4 GDPR compliant
To use Google Analytics 4 in a GDPR-compliant way, you need to address several requirements simultaneously. The checklist below covers the minimum steps most DPAs expect to see:
- •Implement a consent management platform (CMP) that blocks GA4 until consent is given
- •Enable Google Consent Mode v2 so GA respects consent signals
- •Configure data retention in GA4 to the minimum period necessary
- •Document Google as a data processor in your Privacy Policy
- •Sign a Data Processing Agreement (DPA) with Google Analytics
- •If using GA4 for advertising: implement Advanced Consent Mode
Frequently asked questions
Related compliance tools
Cookie Banner Checker
Check if your cookie banner is GDPR compliant and appears before tracking begins.
Privacy Policy Checker
Verify your Privacy Policy covers all required GDPR disclosures.
GDPR Scanner
Full GDPR compliance scan covering cookies, trackers, consent, and more.
AI Act Compliance Check
Assess your organisation's compliance with the EU AI Act.
Ready to check your website?
Enter your URL below and get a free GDPR compliance scan in seconds.