This is true, but you also must engage in a GDPR contract with Google Analytics. I believe they have recently added this as a feature somewhere.