Using the LinkedIn Insight Tag in a GDPR-compliant way

The LinkedIn Insight Tag (snap.licdn.com) measures conversions and builds audiences for LinkedIn advertising. Data flows to LinkedIn/Microsoft (USA).

The LinkedIn Insight Tag is not an analytics but an advertising tool: it measures which visitors trigger a conversion after a LinkedIn click and feeds them into "Matched Audiences" for retargeting. It thus fulfils the same function as the Meta Pixel and is subject to the same strict consent requirement under § 25 (1) TDDDG — there is no consent-free variant.

Since LinkedIn belongs to Microsoft, the transfer is generally covered by the EU-US Data Privacy Framework as long as Microsoft/LinkedIn stays certified. This does not exempt from naming it in the privacy policy: recipient (LinkedIn Ireland as controller jointly with you for the collection, Microsoft in the USA for the further processing), purpose, legal basis (consent) and retention period of the matched audiences belong documented.

Technically, the SDK loads from snap.licdn.com and, with active consent, sets cookies such as li_sugr and bcookie. The most common mistake is embedding the tag via Google Tag Manager without coupling it to the consent status — then it fires despite rejection. After setup, check in a private window: does a request to px.ads.linkedin.com appear before the click on "Accept"?

Is this a risk?

Marketing tracking on the device requires consent under § 25 (1) TDDDG. Without active consent and without naming it in the privacy policy there is no legal basis.

What you can do

• Load the tag only after consent.
• In the privacy policy, describe the purpose, LinkedIn/Microsoft as recipient and the US transfer.
• Document retention and audience use.

Häufige Fragen

Can I use the Insight Tag without consent for pure conversion measurement?

No. Conversion measurement also accesses the device and serves a marketing purpose. It requires consent under § 25 (1) TDDDG, regardless of whether an audience is built.

Who is responsible in data protection terms?

For the collection and transmission, site operator and LinkedIn are jointly responsible (Art. 26 GDPR), comparable to the Meta Pixel. LinkedIn provides an agreement for this whose core content must be disclosed.

Which cookies does the Insight Tag set?

Typically li_sugr, bcookie and UserMatchHistory. They serve recognition and audience matching and may only be set after consent.

How do I check whether the tag loads too early?

Open the developer tools in a private window, filter the "Network" tab for "linkedin" and load the page without confirming the banner. Requests to snap.licdn.com or px.ads.linkedin.com show that the tag fires before consent.

How consentglass helps

The free scan checks the delivered HTML and shows which services are embedded, whether a cookie banner is detected and whether privacy-policy and legal-notice links are present — with context for each finding. It is not a substitute for legal advice.