GDPR and Google Analytics
I think this is a really interesting point from Jeremy. The whole point of GDPR is to get a users consent to track any information about them, and with Google Analytics setting tracking cookies for all visitors cross site will we need to gain consent for that as well? If so, who’s responsible… is it the Product owner (Google) or the Site owner (you)?
Google Analytics is a classic example of a third-party service that uses cookies to track people across domains. That’s pretty much why it exists. We, as site owners, get to use this incredibly powerful tool, and all we have to do in return is add one little snippet of JavaScript to our pages. In doing so, we’re allowing a third party to read or write a cookie from their domain.
An excerpt from GDPR and Google Analytics