Google's General Data Protection Regulation (GDPR) - Stories

As General Data Protection Regulation (GDPR) will be taking effect on 25 May 2018, Google have recently made an announcement on changes that you might need to take action on based on company's necessity.

Click here for more info on GDPR.

These are the two main changes that Google wish to bring upon your attention:

Updated Data Processing Terms. To ensure you are aware of updated data processing terms and a new contact collection mechanism for your Google Analytics Suite Products (Standard and 360 versions).
Data Retention Controls. A tool that allows you to manage how long your user and event data are stored by Google Analytics.

NOTE:

The steps below are only mainly for Google Analytics / Analytics 360 / Google Tag Manager / Tag Manager 360. For other Google products kindly seek advice from vendor who are helping to manage them.
Should you not perform or take action on the mentioned subject matters, XIMNET is not responsible on any form of data loss.

Data Processing Terms

STEP 1: Review and Accept Data Processing Amendments

We highly encourage you to seek advice from your legal team on reviewing the terms before accepting it.

Sign in to Google Analytics.
Click Admin, and navigate to the Account.
Under Account Settings (scroll to bottom of page), click Review Amendments.
Review the amendments
Click Accept
Click Save

STEP 2: Provide Contact Details

“Organization Settings” >“Data Processing Amendment - Details”

REFERENCE: https://support.google.com/analytics/answer/3379636?hl=en

Data Retention Controls

Sign in to Google Analytics.
Click Admin, and navigate to the property you want to edit.
In the PROPERTY column, click Tracking Info > Data Retention.
User-data retention: select the retention period you want.
Reset on new activity: turn the switch on or off.

Default data retention period: 26 months.
Options:

ON: 14, 26, 38, 50 months, Do Not Automatically Expire
OFF: Do not want the retention period for a user identifier reset when that user has new activity

What data are affected and how is it affected:

Any user and event data that is older than your retention setting will be marked for permanent deletion, and will no longer be accessible in Google Analytics.
Deletion will affect the use of segmentation, some custom reports and secondary dimensions when applied in date ranges older than your retention setting.

What data are NOT affected: Reports based on aggregated data will not be affected.

REFERENCE: https://support.google.com/analytics/answer/7667196?hl=en

Recommendations

Below are some actions that you want to take into consideration in order to be GDPR compliance:

Image Source: https://www.isoqsltd.com/quick-guide-complying-gdpr/