That's exactly what your GGP is proposing ("create some kind of privacy criteria and whitelist those analytics that fulfill it")