The data collected by Google Analytics is stored on Google’s servers in the US. Any information received is subject to Google’s privacy guidelines.
An IP address is defined as personal data since it can be traced back to a specific device and thereby to an individual. Difi (the Norwegian Agency for Public Management and eGovernment) uses a Google Analytics’ tracking code, which anonymizes the IP address before the data is stored and processed by Google. This prevents the stored IP address from being able to be used to identify a specific user.