The General Data Protection Regulation — EU law governing how organizations collect, store, and process personal data.

Data & Privacy

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data privacy law enacted by the European Union in 2018. It gives EU residents control over their personal data and imposes strict requirements on organizations that collect or process that data.

For analytics and product teams, GDPR means you must have a legal basis for collecting user data (such as consent or legitimate interest), provide clear privacy notices, allow users to access and delete their data, and implement data protection by design.

GDPR compliance affects your analytics setup: you may need consent banners, data processing agreements with analytics vendors, the ability to delete user data on request, and careful consideration of what data you collect and where it's stored.

Example

To comply with GDPR, your analytics setup includes a consent banner that loads tracking scripts only after the user opts in. You also implement a 'Delete My Data' button in account settings that removes all analytics data associated with that user.

Related Terms

Cookie-Free Analytics

An analytics approach that tracks user behavior without storing cookies in the user's browser.

Consent Management

The system and processes for collecting, storing, and respecting user consent for data collection and tracking.

Data Sovereignty

The principle that data is subject to the laws of the country or region where it is stored or processed.

Build better products with Kitbase

Feature flags, event tracking, and powerful analytics — everything you need to ship faster and iterate smarter.

Start Free Trial