To my understanding, if you only collect anonymous data instead of personalized data through google analytics, then you can go on without a popup or compliance cookie plugin.
Mind you, this only concerns the EU, not the rest of the world. Not sure who would pay a fine if it were to be issued though.