Hi, I'm certainly not a lawyer but after thinking about the EU ePrivacy directive I though it would be enough to just have a privacy policy and explicitly state we use google analytics as we're only collecting anonymous data. There does seem to be a number of differing opinions out there regarding this.
Thanks, Justin