Many of us are using Google Analytics and our ISO is now telling us IP addresses are now considered PII and can not be stored without notice and is building policy around this to augment previous PII policy.

What is everyone elses policy on using GA and do you have any extraordinary agreements with them outside their stated policy.

Thank you.


  1. Richard Lehman

    This issue has been resolved for some time now. Google provides a way to anonymize the IP address by removing the last octet (or 3 digits) of the IP address that Google stores. This way it is non traceable to any end user.

    See Google’s solution here:

    In addition, the code we provide on this webtools website utilizes Google’s solution for anonymizing the IP address. Earlier we wrote a blog post about it. You can find it here:

Submit a Comment