We are currently wokring on a project for Google Analytics Compliance in Europe and were concerned how HubsSpot handles personally identifiable information (pii). I was trying to check the URL to identify if any PIIs for form submissions but wasn’t able to find anything substantial.
Also, if any PIIs are found in the URL we would like to formulate a solution to strip out PIIs from UTMs.
Thank you.
Hi @Vedant,
Thank you for reaching out to the Community!
Just to confirm, are you looking into which data HubSpots sends to Google Analytics? If yes, I’ve found this Google Analytics article about best practices to avoid sending Personally Identifiable Information (PII) to Google and an article with detailed instruction on how to check for PII in Google Analytics data and how to remove it.
Cheers
Mia, Community Team
Hi @Vedant,
Thank you for reaching out to the Community!
I want to preface that I’m not an expert on this matter and your legal counsel will be your best resource for compliance questions. However, I was able to find a resource that may help during your investigation! 
This article from Google explains on how to understand PII in Google’s contracts and policies.
I wanted to share this snippet from the article that explains how Google interprets PII:
Google interprets PII as information that could be used on its own to directly identify, contact, or precisely locate an individual. This includes:
|
This would mean that if you’re creating a Google Lead gen form for example in HubSpot, you would need to avoid these types of information if your contact prohibits you from passing PII to Google. The good news is that it is possible to create a contact in HubSpot without an email address as explained in this help article here.
I’d also recommend checking out the articles that @MiaSrebrnjak recommended (thank you, Mia! 
) and contacting Google Support if you have specific PII questions and how to avoid passing the information in forms.
For any legal questions you may have regarding HubSpot, I wanted to refer you to HubSpot’s legal website, which includes information on our Data Processing Agreement. If you’re not able to find a specific answer there, I would recommend reaching out to your HubSpot Customer Success Manager (Account Manager) to get assistance.
Hope these resources help!
Best,
Kristen
Thank you so much @kvlschaefer & @MiaSrebrnjak for your detailed comments. To answer your question - Yes we are looking into how HubSpots sends data to Google Analytics and whether that data contains any PII. I will now go through the articles provide by you from Google and HubSpot on how can we eliminate this.
On the contrary, I did check one of the Google’s article on how to check if the url contains any PII but wasn’t able to check for the same on our website. Do you know what would be the best possible way to check this?
Thank you for all your assistance.
Hi @Vedant,
You’re very welcome! I hope these articles are helpful
That is a great question about checking if the URL contains any PII.
I will add our subject matter experts to this conversation to see if they have any insight.
Hi @LMeert, @Teun, @ChrisoKlepke, @Anton - Do you have any advice for @Vedant?
Thank you!
Best,
Kristen
An update to this thread,
HubSpot Sensitive Data (Sensitive Data Management for CRM | HubSpot) is the solution for this.
Best regards,
Abraham Ernesto
Hi @Vedant
You can redact any sensitive data in HubSpot tickets (chat messages or comments or attachments) with Strac HubSpot DLP Integration. You can also redact any sensitive data in form fields.
Check out: HubSpot DLP (Data Loss Prevention)
Disclaimer: I work for Strac