Most U.S. companies by now have modified their business practices to comply with the General Data Protection Regulation (GDPR). However, when it comes to the use of analytics technologies such as Google Analytics, the compliance requirements are less clear given the added applicability of the EU “Cookies Directive” (formally, the EU Directive 2002/58/EC) which regulates the use of cookies alongside GDPR-imposed consent requirements. Although implementation of the Cookies Directive varies from country to country in the EU, a decision issued by one national authority can be suggestive of future action. Last year, France’s data protection authority, the French Commission Nationale de l’Informatique et des Libertés (CNIL), issued an important interpretation of the Cookies Directive as it relates to the use of Google Analytics on a website accessible by EU/EEA residents.