Disclosure Guide

How to disclose the LinkedIn Insight Tag in your privacy policy

The LinkedIn Insight Tag enables B2B retargeting, conversion tracking, and Website Demographics on LinkedIn. Because it can map visitors to LinkedIn company and professional profiles, disclosure obligations extend beyond standard analytics to include advertising and audience profiling.

Last reviewed May 18, 2026 by Lokker Privacy Engineering

Not legal advice

The example language on this page is provided for educational purposes only. It is not legal advice and does not create an attorney-client relationship. Privacy laws vary by jurisdiction, sector, and the specific technologies you deploy. Always have a qualified privacy counsel or attorney review your privacy policy language to ensure it accurately reflects your actual data practices and complies with applicable law. Policy text alone does not make you compliant: your technical controls must match what the policy describes.

Data collection

What data LinkedIn Insight Tag typically collects

This is what your privacy policy needs to describe. Be specific: vague references to "usage data" or "technical information" are not sufficient in most jurisdictions.

IP address
LinkedIn cookie values linking behavior to LinkedIn member profiles when signed in
Page URLs and referrer
Device and browser metadata
Custom events configured by the site operator
LinkedIn-specific identifiers stored in the li_fat_id and linkedin_oauth_token cookies
Website Demographics data: aggregate professional attributes (job title, industry, company) of visitors
Conversion events passed via LinkedIn Conversions API

Processing purposes

Purposes to describe in your policy

Privacy laws require you to specify the purpose for each category of data processing. These are the purposes typically associated with LinkedIn Insight Tag.

Conversion tracking for LinkedIn advertising campaigns
Retargeting website visitors with ads on LinkedIn
Website Demographics: understanding the professional profile of site visitors in aggregate
Building matched audiences and lookalike audiences
Measuring campaign attribution and return on ad spend

Jurisdiction notes

US and EU compliance considerations

These are representative notes, not exhaustive legal guidance. Laws continue to evolve and your counsel should review the current requirements for each jurisdiction where your visitors reside.

United States

Under the CCPA and CPRA, transmitting personal information to LinkedIn for cross-context behavioral advertising constitutes a "sale" or "sharing." Your policy must describe this, provide a Do Not Sell or Share mechanism, and disclose that LinkedIn is a third party receiving personal information for advertising. GPC signals must be honored. If Website Demographics is enabled, the processing of professional attributes may trigger additional obligations around sensitive categories in some state laws.

EU and UK (GDPR)

Under the GDPR, the LinkedIn Insight Tag requires explicit opt-in consent. LinkedIn Ireland Unlimited Company is the data controller for data received via the tag. Your policy must describe the transfer of data to LinkedIn Inc. in the United States under Standard Contractual Clauses, the legal basis for each processing purpose, and that LinkedIn uses the data for its own platform purposes including advertising.

Example language

Illustrative policy language for LinkedIn Insight Tag

The examples below are starting points for discussion with legal counsel. They are not approved or jurisdiction-complete language. Your policy must accurately reflect your actual technical configuration and comply with the laws of the jurisdictions where your visitors reside.

Advertising tracker table row

LinkedIn Insight Tag (LinkedIn Corporation): Tracks website visits and conversions for LinkedIn advertising and provides aggregate Website Demographics linking visitor behavior to professional attributes. May link behavior to your LinkedIn profile when you are signed in. Category: Advertising and targeting.

Full advertising and B2B audience disclosure paragraph

We use the LinkedIn Insight Tag, a tracking technology provided by LinkedIn Corporation (and, for EU visitors, LinkedIn Ireland Unlimited Company). The Insight Tag collects information about your visits to this website, including pages viewed, actions taken, and conversion events, and transmits this data to LinkedIn for use in our LinkedIn advertising campaigns, audience building, and conversion measurement. If you are signed into LinkedIn when you visit our website, the Insight Tag may link your on-site behavior to your LinkedIn member profile. We use LinkedIn's Website Demographics feature to understand the aggregate professional characteristics of our website visitors, including job titles, industries, and company sizes. Data transmitted via the Insight Tag may be used by LinkedIn for its own advertising platform purposes as an independent data controller. For EU and UK visitors, this processing requires your explicit consent. You can opt out of LinkedIn's use of your data for targeted advertising through LinkedIn's advertising settings or through our consent center. Data is transferred to LinkedIn Inc. in the United States under Standard Contractual Clauses.

Configuration checklist

CMP and tag manager checklist

An accurate policy is only useful if the technical controls behind it work correctly. These are the configuration points to verify for LinkedIn Insight Tag.

1
Assign the LinkedIn Insight Tag to the "Advertising" or "Targeting" consent category. Do not classify it as Analytics or Strictly Necessary.
2
In opt-in markets (EU, UK), the Insight Tag must not fire before explicit consent. Test no-interaction and reject states with Consent Validator to confirm no LinkedIn requests are made.
3
In California, the Insight Tag must be blocked when a GPC signal is detected or when the visitor has opted out of sale and sharing. Implement this as a firing condition in your tag manager.
4
If you use LinkedIn's Conversions API (server-side), the consent framework must also apply server-side. A client-side opt-out does not automatically stop server-side event forwarding without explicit implementation.
5
Website Demographics is an additional processing purpose. If you use it, your policy and consent categories should reflect that visitor professional attributes are analyzed in aggregate.

Policy vs practice

What policies say versus what Lokker validates

These are common gaps between LinkedIn Insight Tag privacy policy language and what actually happens in the browser. Checking only inside each SaaS admin (CMP, tag manager, or vendor console) rarely answers whether the full stack works together. Lokker tests from the outside: consent state, tag firing, and network requests viewed as one system.

What the policy says

Policies describe the LinkedIn Insight Tag as an advertising tool subject to consent, implying it loads only after the visitor approves targeting cookies.
Policies do not mention Website Demographics, treating the Insight Tag solely as a conversion and retargeting tool.
Policies provide opt-out rights but do not confirm that the Insight Tag is technically blocked when GPC is detected.

What Lokker validates

Lokker tests the no-interaction and reject states to confirm whether the Insight Tag fires. LinkedIn retargeting and conversion tracking are among the most frequently misconfigured consent-gated tools in B2B MarTech stacks.
Website Demographics connects aggregate visitor behavior to professional LinkedIn profile data. This is a distinct processing purpose that requires separate disclosure. Lokker identifies whether the Insight Tag is active and what processing activities it enables.
Lokker sends a GPC signal and validates whether the Insight Tag fires. A policy description of opt-out rights is only accurate if the technical enforcement prevents LinkedIn from receiving data.

Consent Validator tests your site from the outside, not inside each vendor admin. It runs automated flows across accept, reject, no-interaction, and GPC states and checks whether LinkedIn Insight Tag loads through your CMP and tag manager, whether consent signals are honored, and whether any call to that vendor still occurs when the visitor has opted out.

Questions

LinkedIn Insight Tag privacy policy FAQ

What is Website Demographics and does it need to be disclosed?: LinkedIn Website Demographics uses the Insight Tag to provide aggregate reports showing the professional characteristics (job titles, industries, seniority levels, and company details) of your website visitors, derived from LinkedIn member data. This is a distinct processing activity from conversion tracking or retargeting. If you use Website Demographics, your privacy policy should describe this additional purpose and note that LinkedIn matches aggregate behavioral data to professional profile attributes.
Does the LinkedIn Insight Tag constitute a sale of personal information under the CCPA?: Yes. Sharing personal information with LinkedIn for cross-context behavioral advertising constitutes a "sale" or "sharing" under the CCPA and CPRA. Your privacy policy must provide an opt-out mechanism and technically honor opt-out requests and GPC signals. LinkedIn provides advertising opt-out options, but the technical enforcement must also prevent the Insight Tag from firing on your site when a visitor has signaled opt-out.
Does the Insight Tag require consent in the EU?: Yes. The LinkedIn Insight Tag is non-essential and requires explicit opt-in consent from EU and UK visitors under the GDPR and ePrivacy Directive. The Insight Tag must not initialize before a compliant consent management platform has recorded an explicit opt-in for advertising cookies. Technical validation should confirm that no LinkedIn endpoints are contacted in the no-interaction or reject state.

References

Sources and citations

Regulatory guidance, enforcement decisions, and legal cases referenced on this page.

Regulatory guidance

EDPB Guidelines 05/2020 on Consent under the GDPR
European Data Protection Board
California Consumer Privacy Act (CCPA) Text
California Legislature

Explore further

Confirm that LinkedIn Insight Tag fires only when it should

Verify that the LinkedIn Insight Tag stops firing in the reject and GPC states and does not contact LinkedIn endpoints before consent is granted.

See Consent Validator All disclosure guides