Skip to content

Analytics from Google

Google Analytics 4 and website tracking lawsuits

Google Analytics 4 counts visits and shows you which pages people look at and where they came from.

Free, about a minute, no signup for your score.

What Suitcast knows about Google Analytics 4

Medium risk

Type
Analytics
Complaints naming it, 12 months
10

Requests the scanner matches to it

  • www.google-analytics.com
  • analytics.google.com
  • www.googletagmanager.com/gtag
  • region1.google-analytics.com
  • .google-analytics.com

The short answer

Google Analytics 4 is an analytics script from Google. Suitcast rates its risk under the California Invasion of Privacy Act, CIPA, as medium, because complaints describe scripts like it recording visitors before they consent. It is named in 10 verified complaints in the last 12 months. The fix is to load it only after a visitor accepts, or to remove it when it is not used.

Why complaints name it

Complaints cite it as sending a visitor's browsing activity and device details to Google before the visitor was asked.

The act allows $5,000 per violation, which is why firms look for scripts that run the moment a page opens.

The fix

How to stop Google Analytics 4 firing before consent

Turn on Google consent mode so the tag waits for a click on accept.

  1. Google Tag Manager

    Set the analytics_storage consent requirement.

  2. Shopify

    Install Google & YouTube through the app store so it follows the customer privacy banner.

  3. WordPress

    Load it through your consent plugin's Google Analytics integration.

How the scan checks this

  1. Loads your pages like a first visit. A real browser, nothing clicked, nothing accepted.
  2. Checks every request before the banner is answered. A request to www.google-analytics.com is matched to Google Analytics 4 and recorded with the millisecond it fired.
  3. Clicks reject and watches again. When the banner has a reject button, the scan presses it; if Google Analytics 4 keeps firing, the report says so.

Scanner rules and limits are on the methodology page.

Trend

Complaints naming Google Analytics 4, month by month

Verified tracking complaints whose text names this script, by the month they were filed.

Website accessibility (ADA) Website tracking (CIPA)

October 2025 to September 2026, current month to date

Industries

Industries sued over Google Analytics 4

Verified complaints naming this script, by the defendant's industry.

By the defendant's industry

Verified filings, 12 months
  1. 1Medical and health providers2
  2. 2Entertainment and media1

Court records

Latest verified complaints naming Google Analytics 4

Newest first. Every row links to the court record.
  1. Tracking

    Sanchez v. QuinStreet, Inc.

    S.D. California. Attributed to California

    Court recordfor Sanchez v. QuinStreet, Inc. (opens in a new tab)
  2. Tracking

    Pasquini v. Ziff Davis, Inc.

    N.D. California. Attributed to New York

    Court recordfor Pasquini v. Ziff Davis, Inc. (opens in a new tab)
  3. Tracking

    Kizior v. Health Care Service Corporation

    N.D. Illinois. Attributed to Illinois

    Court recordfor Kizior v. Health Care Service Corporation (opens in a new tab)
  4. Tracking

    Edward Lominchar v. TikTok USDS Joint Venture, LLC

    C.D. California. Attributed to California

    Court recordfor Edward Lominchar v. TikTok USDS Joint Venture, LLC (opens in a new tab)
  5. Tracking

    Lombard v. Redfin Corporation

    S.D. Florida, filed by Jared M Slade. Attributed to Washington

    Court recordfor Lombard v. Redfin Corporation (opens in a new tab)
  6. Tracking

    Pearson v. Hims & Hers Health, Inc.

    N.D. California, filed by Schubert Jonckheer & Kolbe. Attributed to California

    Court recordfor Pearson v. Hims & Hers Health, Inc. (opens in a new tab)
  7. Tracking

    Maurer v. Edward D. Jones & Co., L.P.

    E.D. Missouri, filed by Schubert and Jonckheer LLP. Attributed to Missouri

    Court recordfor Maurer v. Edward D. Jones & Co., L.P. (opens in a new tab)
  8. Tracking

    Howard Clark Jr v. Centene Corporation

    C.D. California, filed by Maynard Nexsen Pc

    Court recordfor Howard Clark Jr v. Centene Corporation (opens in a new tab)
  9. Tracking

    Charles Orozco v. National Review, Inc.

    C.D. California. Attributed to New York

    Court recordfor Charles Orozco v. National Review, Inc. (opens in a new tab)
  10. Tracking

    Erakat v. The Intercept Media, Inc.

    E.D. California, filed by Law Offices of Ross Cornell APC. Attributed to New York

    Court recordfor Erakat v. The Intercept Media, Inc. (opens in a new tab)

Same type

Other analytics scripts the scanner checks

Scripts of the same kind carry the same pattern in complaints, and the same fix.

Questions owners ask

Whether Google Analytics 4 is a problem, how to check your site, and where the counts come from.
Is having Google Analytics 4 on my site illegal?
No. The complaints do not claim the script is illegal; they claim it recorded a visitor before the visitor consented, or kept recording after the visitor declined. Loading Google Analytics 4 only after consent, or removing it when it is not used, is what removes the pattern the complaints describe.
How do I know if Google Analytics 4 fires before consent on my site?
Run the free scan. It loads your pages without clicking anything and checks every request that leaves the browser against its tracker catalog, recording the millisecond each match fired. If Google Analytics 4 appears, it fired before consent. When your banner has a reject button, the scan clicks it and reports whether the script kept firing.
Where do the case counts on this page come from?
From the complaint text of verified California Invasion of Privacy Act filings. When a complaint names this script, the case is linked to it. Complaints that are not yet available in the public record are not counted, so the number is a floor.

Keep going

Does Google Analytics 4 fire before consent on your site?

The free scan checks every request your pages make before the banner is answered, shows the millisecond Google Analytics 4 fired, and whether it kept firing after reject.

Free, about a minute, no signup for your score.

Suitcast identifies risk indicators. It is not legal advice and does not determine compliance.