IMPACT EXTEND
MEASURECAMP LONDON 2018
GDPRwithinGoogleTagManager
Making an effort to help your DPO with a
little bit of R
By Danny Mawani Olsen
/dannymawani @dannymawani
1. Copenhagen based (That’s in
Denmark)
2. Works for IMPACT EXTEND
3. 5th measurecamp
4. Done GTM and GA for 5 years
soon
ABOUT ME
AVOIDING THE
ASTEROIDS
TheIamnotalawyerbut!
Notalawyer
Thisiscompletelyupfordebate,This
isjustmysolutiontohelpoutclients–
Pleaseforgodssake,shareifyouhave
abetterway!
SO, HOW
DID THIS ALL START UP?
T h e r e a r e m u l t i p l e n e t w o r k c a l l s o n e a c h
w e b p a g e s e n d i n g d a t a t o m u l t i p l e t h i r d p a r t i e s
• DPO’s have no idea of what the
marketeers are doing
• The marketeers have no idea of
what the tools they are using are
sharing with third party
applications
• The developers have no idea of
what the marketeers added into
Google Tag Manager
THE CLIENTS ARE
LITTERALY ASKING FOR IT
So i looked into different solutions
In terms of documentation - Simos
visualization didn’t quite cut it
Spring cleaning
And documenting the setup
WHAT EFFORTS DID WE DO?
Setting up Conditions
Fromboth the datalayerand
cookies
Automating it
To createa quck setup fornew
clients
SPRING CLEANING
AND DOCUMENTATION
First the spring cleaning
First the spring cleaning
66 tags
First the spring cleaning
First the spring cleaning
16 tags
How it is done
1.
Abetter
datalayer
3.
Deleting
unusedtags
2.
Regexlookup
tables(F***floodlightstags)
3.
Combining
tags
How it is done
THIS GIVES US MORE CONTROL &
UNDERSTANDING FOR THE SETUP
THEN WE USED R TO DOCUMENT
THE STRUCTURE
DOCUMENTING TAGS
DOCUMENTING TAGS
DOCUMENTING TRIGGERS
DOCUMENTING TRIGGERS
DOCUMENTING VARIABLES
DOCUMENTING VARIABLES
TagswithinGTMthatsends
networkrequests
Responsible/User Descriptionandusage Networkcalls Permissiontypeand
storage
AdForm Mediaagency1 Targetedadsxyz Adnxs.com,xyz.com Cookie
Facebook Company Targetedadsxyz Facebook.com,
akamai.net
Cookie
HotJar Mediaagency2 Videorecordingsofusersto
internalusertesting
Akamai.net,hotjar.com Cookie
Sleeknote Externalconsultancy Smartsubscriptionbannersand
personalization
Sleeknote.com,
xyz.com
CRM
Addthis SomeonenamedJohn Weirdbuttonsthattoomany
peopleuses
Addthisserver.com NONE
GoogleAnalytics Nobodyknows! Somethingwithdatathatstill
havecollectedwaytoomany
thingsIshouldcareabout
Googleanalytics.com Cookie
GTM GDPR Framework
Setting up Conditions
From both GTM, the
dataLayer and cookies
Rule of Three
1 . P e r m i s s i o n
m u s t b e s e t
2 . C o n s t a n t i s s e t
a s b l o c k i n g r u l e
3 . D a t a l a y e r i s o n
Rule of Three
1 . P o w e r t o t h e
u s e r s
Rule of Three
1 . P o w e r t o t h e
u s e r s
2 . P o w e r t o p e o p l e
h a n d l i n g G T M
Rule of Three
1 . P o w e r t o t h e
u s e r s
2 . P o w e r t o p e o p l e
h a n d l i n g G T M
3 . P o w e r t o t h e
d e v e l o p e r s
Most importantly – Power to the DPO
Using this as a trigger exception
Using this as a trigger exception
Users Developers GoogleTagManagerstaticvariable
GA Variable killswitch OFF
ALL
Serverside datavariable killswitch OFF
How it is done
1.
Firethis tag when
3.
Astaticvariablein
gtmis set tooff
2.
Permissions are
granted
3.
Thedevelopers
havea datalayer
variableset tooff
Automating it
To create a quick setup for
future clients
Unfortunately a GTM Cleanup is a
manual process most times
However, all writing
can be used again
How can it be build?
Pullgtmsetupand
visualizeit
Ifthedatacontainsmarketing
tags,pushtheprewritten
documentationintoatable
FormatitwithMarkdownand
behappywithyouralmost
prebuildGDPRreportforthe
DPO
TagswithinGTM
thatsendsnetwork
requests
Responsibl
e/User
Description
andusage
Networ
kcalls
Permission
typeand
storage
AdForm Mediaagency1 Targetedadsxyz Adnxs.com,
xyz.com
Cookie
Facebook Company Targetedadsxyz Facebook.co
m,
akamai.net
Cookie
HotJar Mediaagency2 Videorecordings
ofusersto
internaluser
testing
Akamai.net,
hotjar.com
Cookie
Sleeknote External
consultancy
Smart
subscription
bannersand
personalization
Sleeknote.c
om,xyz.com
CRM
Addthis Someonenamed
John
Weirdbuttons
thattoomany
peopleuses
Addthisserv
er.com
NONE
GoogleAnalytics Nobodyknows! Somethingwith
datathatstill
havecollected
waytoomany
thingsIshould
careabout
Googleanaly
tics.com
Cookie
GTM GDPR Framework
By having most of the work
written already, we can
simply say that ”If there is
any tags called facebook, then
add the facebook part to the
documentation”.
MAKING THE MOST OF IT
WITH AUTOMATION
1. Pull down GTM info with R
2. If any tags matches known
marketing tags add a
prebuid tag description to
the markdown document
3. Produce, send and make the
DPO happy
It is a ”Two birds, one stone” way of
doing it
Y o u g e t t o c l e a n
u p t h e o l d s e t u p
Y o u m a k e t h e D P O
H a p p y , a n d y o u r
w o r k d o c u m e n t e d
MAKING IT REPRODUCABLE
WITH R MARKDOWN
MAKING IT REPRODUCABLE
WITH R MARKDOWN
Presshere togogetthe R
code for downloading
information fromGTM
Presshere togogetthe R
Markdown code for
visualizingthe
information
Presshere tosee
everything written in R
Markdown
https://github.com/dannymawani/repository/blob/mast
er/Google Tag Manager Documentation Data
https://github.com/dannymawani/repository/blob/mast
er/Rmarkdownmc18
http://rpubs.com/dmoimpact/measurecamp2018
ANY LAST QUESTIONS
OR THOUGHTS?
GDPRwithinGoogleTagManager
Making an effort to help your DPO with a
little bit of R
By Danny Mawani Olsen
/dannymawani @dannymawani

GDPR within Google Tag Manager - Measurecamp 2018