Is Your Cookie Banner GDPR Compliant?

A banner’s appearance alone cannot establish compliance. Check what the website actually does:

• Before a choice: technologies requiring consent must remain inactive.

• After rejection: those technologies must remain inactive when visitors navigate to other pages.

• After partial acceptance: only the consented purposes and exempt uses should operate.

• After withdrawal: the affected tracking must stop, including reading previously placed cookies.

• In the interface: purposes must be clear, refusal easy and consent-dependent options off by default.

• In your records: you should be able to demonstrate when and how consent was obtained.

Use browser storage and network checks alongside a cookie audit. Regulators have imposed penalties where websites continued tracking despite rejection or withdrawal.