Collecting data responsibly protects your business and your customers. Use this checklist to make sure your GA4 setup respects privacy rules like GDPR and CCPA.
Consent Management
- Add a cookie consent banner that lets visitors accept or decline tracking
- Connect your consent banner to Google Consent Mode
- Confirm GA4 respects a visitor’s choice when they decline tracking
- Test your consent banner on both desktop and mobile
Data Collection Settings
- Turn off Google Signals if you do not need cross device advertising features
- Set data retention to the shortest period that still meets your reporting needs
- Avoid collecting personal information like names or emails inside event parameters
- Review IP anonymization settings for regions that require it
Documentation
- Update your privacy policy to describe what GA4 collects and why
- List any third party tools connected to GA4, like Google Ads
- Keep a record of when consent settings were last reviewed
Frequently Asked Questions
What is Google Consent Mode?
Consent Mode is a setting that tells Google’s tools how to behave based on a visitor’s cookie consent choice. It lets GA4 adjust data collection instead of stopping it entirely, which helps keep some reporting accurate even for visitors who decline.
Is this checklist a substitute for legal advice?
No. This checklist covers common technical settings in GA4. Privacy law varies by region and by business, so talk to a qualified lawyer about what applies to you.
BOOK A FREE 30 MINUTE CALL →
We will review your current setup and flag any privacy settings that need attention.