How to Implement a GDPR-Compliant Cookie Banner?

Implement the banner together with controls that prevent tracking without the required permission.

1. Identify your cookies, pixels and embedded services, including their providers, purposes and durations.

2. Determine which uses require consent and which qualify for an exemption.

3. Install a consent management platform (CMP) or custom solution, ensuring its controls take effect before consent-dependent tracking begins.

4. Connect the consent settings to every relevant integration, including tag-manager tags, directly embedded scripts and third-party content.

5. Provide clear acceptance, rejection and purpose-specific options, with consent-dependent settings off by default.

6. Save consent evidence, including the time, choices and information version presented. Add an accessible way to withdraw consent.

7. Test initial loading, rejection, partial acceptance and withdrawal on desktop and mobile.

Repeat these checks when tracking tools change. In the EU, implementation must meet national ePrivacy rules as well as the GDPR’s consent standard.