Microsoft Office 365 and Azure have GDPR related features and mechanisms implemented and available for several month now. Google admins and users wishing to implement GDPR solutions, have been left to wait until today. That is very late.
So, Dear Google Administrator
Over the past year GOOGLE shared how are they preparing to meet the requirements of the GDPR, the new data protection law coming into force on May 25, 2018. Today (2018 APR 12) they are sharing more about important product changes that may impact your Google stored data, and other updates in preparation for the GDPR.
This requires your attention and action even if your users are not based in the European Economic Area (EEA).
Today GOOGLE has introduced granular data retention controls that allow you to manage how long your user and event data is held on GOOGLE servers. Starting May 25, 2018, user and event data will be retained according to these settings; Google Analytics will automatically delete user and event data that is older than the retention period you select. Note that these settings will not affect reports based on aggregated data.
Action: Please review these data retention settings and modify as needed.
Before May 25, GOOGLE engineers will also introduce a new user deletion tool that allows you to manage the deletion of all data associated with an individual user (e.g. site visitor) from your Google product, properties. This new automated tool will work based on any of the common identifiers. Details will be available on our Developers site shortly.
As always, GOOGLE remain committed to providing ways to safeguard your data. Google will continue to offer a number of other features and policies around data collection, use, and retention to assist you in safeguarding your data. For example, features for customizable cookie settings, privacy controls, data sharing settings, data deletion on account termination, and IP anonymization may prove useful as you evaluate the impact of the GDPR for your company’s unique situation and Analytics implementation.
there are also detailed “Contract And User Consent Related Updates” of which you will be dully informed today.
My comment? I am still not convinced Google can guarantee your EU data will stay in the EU. Microsoft can.
I do not know how not to make this sounding like Microsoft marketing article.