Can I use Google Analytics in Saudi Arabia without consent?

Normally not. Google Analytics sets cookies that identify a visitor's browser, so under the PDPL what it collects is personal data, and analytics normally needs the visitor's explicit, informed consent before it runs. Google Consent Mode v2 is how Google's tags learn the visitor's choice. Analytics data processed outside the Kingdom also counts as a transfer.

Google's own consent requirement covers visitors in the European Economic Area, the UK and Switzerland. For Saudi visitors the obligation comes from the PDPL, and Consent Mode v2 is the channel: the banner asks, and the answer reaches Google Analytics and Google Ads tags before they decide what to store.

Transfers are the second question. Article 29 and the Transfer Regulation decide when data can leave the Kingdom, and an analytics platform processing visitor data outside Saudi Arabia counts as a transfer, so keep what you send to the minimum needed.

In the September 2026 KSA E-Commerce Privacy Compliance Index, 751 of 1,556 Saudi storefronts (48%) ran Google Analytics or Google Tag Manager without sending a Consent Mode v2 signal.