Here's a quick walkthrough of the update all website owners have to perform in their Google Analytics to review/accept the amendment to the data processing terms for GDPR compliance AND provide their contact details, before May 25th. *This is different from the Data Retention Controls that google sent out which people could ignore.*

This is real easy but myself and another WA member Philip just went through it and we both managed to take a couple of wrong turns along the way so here it is with signposts!


You will see the mandatory email google analytics sent us has a step 1 and 2:

Step 1: Review and accept the updated data processing terms in each account for each product you manage in the Google Analytics Suite

Step 2: Provide your legal entity and contact details for notifications we may need to send under the GDPR


I will walk you through the steps involved here and include a full copy of that email sent to us by google analytics at the end of the tutorial for reference.


*Note this is for regular google analytics as well as their 360 suite, the email heading has their colorful 360 suite logo on top but in the small print you'll see analytics and 360 follow the same path here.


**For those in America and Canada I'm hearing a couple of people say google analytics sent you the Data Retention Controls review for adsense email but maybe not this email for Amendment to Data Processing Terms - in their small print on the contact details page during step 2 it does say it applies to 'those outside the EEA where the GDPR reaches' which is anyone with European traffic. When you go through the steps it will update.



Next page Step 1.1 of Review and Accept the Amendment to the Data Processing Terms for GDPR



Join the Discussion
Write something…
Recent messages
Shannonkamal Premium Plus
I haven’t received that email should I be worried?

I’m kinda loss with this GDPR area at the moment

I got the meaning just not much on the compliant procedure
Reply
onmyownterms Premium
There are two things you need to do - update your privacy policy to the new WA template provided in SiteContent and install the GDPR plug-in.
Reply
Shannonkamal Premium Plus
that's it?
Reply
MozMary Premium Plus
Mel's advice is wrong, however don't worry about anything to do with gdpr as they are still ironing things out and it's up in the air at the moment

- as for this google update google is actually forcing this update on some sites believe it or not and on others it asks people to go do it themselves - one reason to do it is to have a portfolio of accounatability that you can present at any time if anyone tries to accuse you of not complying - you can easily go into your admin settings and take a look to see if google has updated it for you - will help you navigate your way around google and not be afraid of it

Here is my summary of the areas to look at for GDPR SPAD - security, privacy, accountability, data

S - keep on top of your security updates, and SSL certs for your sites
P - update your privacy policy
A - be accountable by being able to say you performed any updates and requests made by your affiliate platforms including WA
D- data, be aware wordpress now has data export built into it and people in Europe have a right to ask you for any personal data collected by your site [so know where you are collecting it]

That advice is based on reading the official websites and not just hearsay from someone who might or might not have read part of it

But you will see many sites out there over reacting but some are under reacting too, it will take time to settle down and even just following Kyle's advice in here will cover your ass CYA being what everyone is trying to do with this :D

It is worse for people who use ads on their sites, they have to get more permission when it comes to IP addresses, but one very clever site out national weather site simply sent people out to an extension on chrome to go annonymise their own IP if they want to But really the dust still needs to settle on all this, so don't worry too much, just cya ;)
Reply
onmyownterms Premium
Thank you, but I provided them with the advice provided to US by Kyle, does that mean the official WA response is wrong too? I'd like to see someone official from WA that more is needed other than these two steps.
Reply
MozMary Premium Plus
you should look at Kyle's update on that, he changed his advice and it is precisely to what I'd been saying on privacy by design, plugin unnecessary

and did you notice he always said it was a discussion, that there will be more to it, and there is...
Reply
onmyownterms Premium
No, I somehow missed that update. Thank you for pointing this out to me. As my sites target the US, I'm not as personally invested in this as I probably should be. I'll refer folks to you from now own.
Reply
Shannonkamal Premium Plus
Thanks I’ll check that out right now

I appreciate your thorough approach
Reply
PhilipC1 Premium
Hey,

I know Mary said already, but these plugins actually say this plugin does not mean your site is GDPR compliant - what a cop out!

Whats the bleeding point installing them then? Ugg, anyways, read the fine print within their plugins more info section - no ones taking resonsibility and theres like 600 million bloggers out there gonna get hit hard in the future if not compliant - that is just a sneaky way to tax peeps in my opinion.
Reply
onmyownterms Premium
OK, here is my .02, which has been my .02 from the beginning. They are NOT going to care about teeny-tiny sites that don't make a lot of money - this is going after the big boys, and it won't be settled until there are actually court cases to set precedent. I'm not worried. My site is in the US, and I'm not deliberately marketing to the EU. I personally don't feel like I have any skin in the game, so I'm devoting my resources elsewhere. After someone sues Facebook, then maybe I'll care.
Reply
PhilipC1 Premium
HAHA I hear you. I have to care cos I am in the EU and get EU traffic - argg haha.

So, I think I am almost there. Thanks for your opinion and yes I think initially it may take some years for a more orwellian approach to enforcement to all sites so I understand where you are coming from.

My concern is I don't want to be in violation so I lose my adsense ads so there is good incentive for me to get it right.
Reply
MozMary Premium Plus
yeah he put the 'update' in a comment on his official thread where most peeps will miss it as there's a million comments there

being in europe I studied the official websites so I'd know what not to do when hit with 'you gotta do this or else' later on, saved me a lot of hassle in unnecessary plugins!
Reply
MozMary Premium Plus
don't worry about gdpr, just cya / cover your ass with adsense, they set you a few hoops to jump through by the sounds of it

SPAD, security, privacy, accountability, data - just show you are doing 'best practice' for that and no one can tax or fine you later, they are still ironing out 'best practice' and there's a lot of bad advice floating around. So if you've covered the basics as presented to you on your marketing platform, and then satisfied the Ts&Cs; of whatever program you are with then you are doing 'best practice' and let them tell you what more you need to do

google has been passing on it's job to us all the time, same with this adsense thing, I'd just tell people go read the pp and sod off if they want an internet that works differently...
Reply
PhilipC1 Premium
HAHA! Yes, but that probably won't win you too many loyal readers - but, Its the flipping truth!

However, its TOO LATE FOR ME MARY! - I have installed an OPT OUT on my site that is visible to all. So others click on it and it immediately opts them out of Analytics tracking them.

I placed that once more in my ppp and created a cookie policy page, AN OVERSIGHT OF MAGNITUDE ON MY PART, as I did not have one in place.

I am not worried about fines, I know us little fishies aint' getting fined 20 million, but really, so adsense can't turn around and say "we are keeping you 10K!" HAHA!

So I did the nonpersonlized ads in Adsense and did auto-ads for those interested in knowing. That is done.

Thats it! I did read that we can't send data on other things but I can't recall. Anyways, my ppp and cooki policy, disclaim, legal page, recaptcha, GDPR Anonymize Data Form - (have I missed anything) - and now I believe this issue is behind me - to my satisfaction. If peeps ain't happy, then they can opt out. So I guess I am covered for some time until they make up some new rules just to annoy us.

So, back to work for me Mary, and thanks so much for you help here as well - your training went a long way in helping me to navigate.
Reply
bluemagic64 Premium
Wow! Too much to work. Not easy at all.
Reply
MJ_SNAR Premium
Thanks for sharing! Good to know!
Best,
Marcus
Reply
Isabella4198 Premium
Thanks MozMary. Does this apply to me, I am in the US and I do not promote products outside of US.
Reply
MozMary Premium Plus
GDPR does apply to the US and other non-european countries, because traffic is global including europe for most websites

go into your analytics admin and follow through, if those instructions are there then click them - if they are not then let us know

All of their instructions were a bit muddy, so on the page where we fill in contact details they say 'all european economic area AND anyone the regulation reaches' see how muddy that is - because GDPR reaches everyone, yet they did not commit themselves

if there is a button in your analytics asking you to accept then do it, if not then fine - but go in and look
Reply
Isabella4198 Premium
Thanks again MozMary.
Reply
ccapo Premium
If we have not received this notice should we just go ahead and do this?
Reply
MozMary Premium Plus
yes, if you have google analytics just log in and go ahead to admin and follow those instructions, you'll see the review and accept button - if they are not there then you'll know you don't have to do anything - let us know

emails can get lost in spam folders sometimes
Reply
ccapo Premium
All done thank you Once again this is what makes WA a great place to be and be apart of.
Reply
phakacha8 Premium
MozMary,
Thank you so much for taking your time to make this tutorial very simple and clear.
By the way, I've not done anything for the GA 360 Suite for fear of falling into errors.

You may kindly do one for beginners in your next tutorial.

Thank you so much for sharing this useful stuff on GDPR Acceptance.
Cheers!
Reply
MozMary Premium Plus
This is the beginners version, the regular google analytics.

The email they sent out has 360 suite on it but also analytics in the same pathway

if you just follow the login to all website data and admin you'll navigate to the update agreement
Reply
phakacha8 Premium
Awesome.
Thanks
Reply
Sherion Premium
Thank you so much.
Reply
Top