Noise or Music?

Is Google Analytics Removing Personal Data?

Categories: GA & GTM, GDPR & Privacy / Comments: 2

Google Analytics is now automatically removing personal info from collected data. So far only for query term “email”.

I regularly audit and test accounts for PII and found this today: Google Analytics is automatically replacing email addresses it finds in your reports with the text “obfuscated” – in real time. At present it seems only to work when sent as a value in the query term ?email=. As you can see form the screenshot, my test for ?emailaddr= still shows in the report.

Lets hope this proactive filtering can get smarter over time. That said, I hope web dev/admins don’t get complacent and reply on this as band-aid fix.

No one should be sending personal information (PII) around the web in plain text as part of a URL, but amazingly it does happen. Even by big brands that should know a lot better… Apart form being a reputation killer, its illegal to do so in the EU.

Share Button

Comments (most recent first)

  1. Russ says:

    Hi Brian,

    interesting find… we’ve tried to replicate the behaviour on one of or GA properties and it doesn’t work.
    Do you have a forgotten filter in place that is causing the obfuscation?


Leave a Reply to Brian Clifton Cancel reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

© Brian Clifton 2020
Best practice privacy statement