That's not my understanding of the ruling. My interpretation is that even with those GA settings in place (anonymize IP), GA still does not comply with GDPR. T

That's not my understanding of the ruling. My interpretation is that even with those GA settings in place (anonymize IP), GA still does not comply with GDPR. To back that up: https://autoriteitpersoonsgegevens.nl/sites/default/files/atoms/files/handleiding_privacyvriendelijk_instellen_google_analytics.pdf https://autoriteitpersoonsgegevens.nl/sites/default/files/at... Above is the official guidance from the dutch privacy authority. It basically documents the best practice since 2018: anonymize IP and how to configure several other privacy-friendly settings in GA. Exactly one week ago they added an explicit note to the very top of the document. It says that soon GA (as a whole) may no longer be allowed. No matter how you configure it. They go on to explain that they're in the process of investigating two other complaints and will come to a final conclusion early this year.