Is our consent rate good? The answer depends on where your visitors are, what industry you're in, what your banner looks like, and what device people use. It also depends on what you mean by "good" -- raw acceptance rate and effective data coverage are different numbers, and conflating them leads to bad decisions.

This guide compiles the consent rate benchmarks that matter in 2026, drawn from CMP industry data reported between 2023 and 2025, plus regulatory impact studies and cross-platform measurement research. Where figures vary between sources (and they always do), we present ranges rather than false precision. The goal is a reference frame for your own numbers, not a target to game.

All averages below represent the general population of banners -- optimized and unoptimized alike. For what's achievable with legitimate UX techniques specifically, see our consent rate optimization guide.

Regional Consent Rate Averages

The single biggest factor driving consent rates is jurisdiction. Opt-in vs. opt-out frameworks produce consent-rate gaps that no amount of banner optimization can fully close.

EU/EEA: 38-48% average acceptance

Under GDPR and the ePrivacy Directive, non-essential cookies require affirmative opt-in. The median across EU markets sits around 42%, with meaningful country-level variation. German and Dutch sites tend to run lower (32-40%), reflecting stronger enforcement and higher privacy awareness. Southern European markets (Spain, Italy) tend higher (45-52%). France sits between, shaped by CNIL's aggressive enforcement of reject-button parity since 2022.

If your EU consent rate is below 35%, your banner almost certainly has a UX problem. Above 50%, you're outperforming average.

UK: 40-50% average acceptance

UK GDPR and PECR produce rates similar to the EU, with a slight upward skew due to historically softer enforcement by the ICO. Expect these rates to drift down as UK sites move to fully compliant two-button designs. (See our PECR and UK cookie law guide.)

US: 70-82% average acceptance

Most US state privacy laws follow an opt-out model. The banner is a disclosure notice with a "Do Not Sell/Share" link rather than a blocking choice, so consent rates hover around 75%. States with no privacy law show 85-90%.

Important: these high numbers don't mean more usable data. GPC signals (covered below) silently opt out 18-28% of US visitors without any banner interaction. A reported 78% consent rate may coexist with an effective opt-in rate of 60%. (See our US state privacy law guide.)

Brazil (LGPD): 50-65%

LGPD requires explicit consent, but enforcement maturity and user expectations put rates above EU levels. The ANPD has focused more on breach response than consent UX so far. (See our LGPD enforcement guide.)

Canada (PIPEDA): 60-72%

PIPEDA allows implied consent for certain analytics purposes. Sites using opt-in banners see 60-72% -- higher than the EU due to less confrontational cultural expectations and lower regulatory pressure. (See our PIPEDA guide.)

Non-regulated markets: 80-92%

Markets with no cookie consent law (much of Asia, the Middle East, parts of Africa) show 85%+ where banners are used at all. Relevant for global traffic weighting, but not a meaningful benchmark since consent isn't required.

Consent Rates by Industry

Within any given region, consent rates vary by industry. The ranges below are general averages across all banner types and optimization levels. The "target" column reflects what optimized, compliant banners achieve in EU opt-in markets.

E-commerce

Average: 50-65% (opt-in) / 78-88% (opt-out). Target: 55-70%. E-commerce benefits from high visitor intent -- people who came to buy are predisposed to accept. They understand the value exchange. If yours is below 45% in the EU, your banner is likely interrupting the purchase flow badly. (See our e-commerce consent guide.)

Media and publishing

Average: 35-50% (opt-in) / 68-78% (opt-out). Target: 45-60%. Structural headwinds: visitors arrive from search/social with low commitment, consume free content, and have lower site investment. Complex cookie ecosystems (ad exchanges, header bidding, embeds) produce longer consent lists that look worse in a detailed layer. Lower rates here are structural, not a failure -- focus on per-category opt-ins.

SaaS and B2B

Average: 52-68% (opt-in) / 80-90% (opt-out). Target: 58-72%. Higher intent visitors, often through direct navigation. They're evaluating a product they might pay for, which creates trust. Simpler cookie profiles (analytics, marketing platform, chat widget) make the consent choice feel less risky.

Healthcare

Average: 30-45% (opt-in) / 62-72% (opt-out). Target: 38-50%. Visitors researching health conditions are naturally privacy-sensitive. The FTC's enforcement actions against health data sharing (GoodRx, BetterHelp, Cerebral) have pushed health sites toward cautious consent UX. Accept below-average rates and focus on minimal cookie profiles. (See our healthcare consent guide.)

Finance and insurance

Average: 35-50% (opt-in) / 65-75% (opt-out). Target: 40-55%. Similar to healthcare -- visitors handling financial information are privacy-aware. Banks tend toward compliance-first banner design, and PCI DSS requirements create additional cookie governance overhead. (See our FinTech consent guide.)

Government and public sector

Average: 40-55% (opt-in) / 72-82% (opt-out). Target: 45-58%. Visitors trust the institution but have no commercial incentive to accept. Government sites often run lean cookie profiles, which simplifies the choice but doesn't boost rates by itself.

Consent Rates by Banner Type

Banner format shapes consent rates independently of copy or design quality. All ranges below are for opt-in markets.

Bottom bar: 40-55%. Least intrusive, lowest bounce impact, but also lowest interaction rate. Some visitors simply ignore it -- no explicit choice recorded. Best for informational sites.
Center popup/modal: 50-65%. Forces a decision by partially obscuring the page. Higher interaction and consent rates than bottom bars, with a 2-5% bounce rate increase. The most common GDPR-compliant format in 2026.
Full-screen overlay: 55-70%. Blocks all content until a choice is made. Highest consent rates but also highest bounce impact (5-12% increase). Regulatory scrutiny is growing -- the EDPB views consent walls skeptically. (See our cookie walls guide.)
Notice-only (opt-out jurisdictions): 80-92%. A disclosure notice, not a gate. The "consent rate" measures people who didn't actively opt out. Comparing this to opt-in modal rates is comparing different things.

Impact of Banner Design on Rates

Within any banner type, design decisions create 10-25% variance in consent rates. The key levers, measured across large CMP deployments:

Button count: Two-button (Accept All + Reject All) outperforms three-button layouts for total interaction rate. Adding a "Manage Preferences" middle option splits attention without proportionally increasing acceptance. Any design where rejecting takes more clicks than accepting will face enforcement in 2026.
Position: Bottom banners produce lower consent rates than centered modals (visitors scroll past them), but also lower bounce rates. Left-right button positioning has a small (2-4%) effect driven by reading direction -- too small to optimize for without risking manipulation territory.
Color and contrast: Making Accept a different color from Reject lifts consent 5-12%. This is where optimization most easily crosses into dark patterns. Both buttons must be clearly visible and readable. A gray-on-gray "Reject" next to a bright green "Accept" will get fined.
Timing: Appearing 1-3 seconds after page load instead of immediately lifts consent 10-15%. No non-essential cookies may fire during the delay -- Consent Mode's default denied state handles this.
Copy length: Under 40 words in the first layer outperforms longer copy. Visitors scan for buttons, not paragraphs. Put detail in a second layer via "Customize" or "Learn More."

For detailed techniques on each lever, see our consent rate optimization guide and banner design best practices.

Mobile vs. Desktop Consent Rates

Mobile visitors consent at lower rates in almost every segment. The gap ranges from 5 to 15 percentage points depending on banner quality.

The causes are structural: banners that fit on desktop become walls on mobile; tap targets shrink below usable sizes; mobile sessions are shorter and more easily disrupted by consent interruptions. Typical gaps: e-commerce 8-12 points, media 10-15 points, SaaS 5-8 points.

With 60%+ of global traffic on mobile (80%+ in India, Brazil, Southeast Asia), this isn't a secondary concern. Bottom-sheet patterns, 44px minimum tap targets, and progressive disclosure keeping the first layer under 40% of viewport height are the minimum requirements. Sites implementing these narrowed their desktop-mobile gap to under 5 points.

GPC, DNT, and Effective Consent Rates

Your banner consent rate measures explicit choices through the UI. It doesn't account for visitors whose browsers signal preferences on their behalf.

Global Privacy Control (GPC)

GPC communicates a preference not to have data sold or shared. It's legally binding under CCPA/CPRA, Colorado's CPA, Connecticut's CTDPA, and several other US state laws. Firefox and Brave enable it by default.

In US traffic, 18-28% of visitors send GPC (higher for tech-oriented audiences). If you honor GPC as required by law, these visitors are effectively opted out even if your banner shows high acceptance. A reported 78% consent rate with 22% GPC penetration means roughly 60.8% effective opt-in.

Do Not Track (DNT)

DNT has no legal backing and most sites ignore it, but some CMPs interpret it as a reject signal. If yours does, account for it in your effective rate. If not, it's a non-factor. (See our GPC explainer.)

Calculating GPC-adjusted consent rate

Effective opt-in rate = Banner acceptance rate x (1 - GPC signal rate)

Use this GPC-adjusted number when sizing consented audiences for analytics modeling and ad targeting, not the raw banner acceptance rate.

Effective Data Coverage: Consent Rate + Modeling Recovery

Consent rate determines how much first-party data you collect directly. But GA4's behavioral modeling recovers some of what's lost from non-consented sessions, making your effective data coverage higher than your raw consent rate.

When Consent Mode is implemented, GA4 sends cookieless pings for non-consented visitors -- page URL, timestamp, session context, but no user identifiers. GA4 uses these pings plus patterns from your consented traffic to model conversions. Google's documentation requires a minimum of 1,000 daily users and 1,000 consented events per day for reliable modeling. (See our Consent Mode and GA4 reporting guide.)

The formula

Effective coverage = Consent rate + (1 - Consent rate) x Modeling recovery rate

GA4 typically recovers 50-70% of the gap in conversions data for sites with sufficient volume. Examples:

42% consent rate, 60% modeling recovery: 42% + (58% x 60%) = 76.8% effective coverage
65% consent rate, 60% modeling recovery: 65% + (35% x 60%) = 86% effective coverage

The relationship is non-linear: improving from 40% to 60% consent matters more than 60% to 80%, because modeling already covers part of the gap at higher rates. But below 25-30% consent, modeling quality degrades sharply -- too little consented data to build reliable patterns. Consent rates below 25% in opt-in markets should be treated as a data quality emergency. (See our guide on measuring consent's analytics impact.)

Tracking Your Rates in CookieBeam

Benchmarks only matter if you can measure your own performance against them. CookieBeam's analytics dashboard provides what you need without custom reporting.

Regional breakdown: Acceptance, rejection, and partial-consent rates by jurisdiction. Compare your EU rate against the 38-48% average and your US rate against 70-82%. If your EU rate is 25%, that's a problem worth fixing urgently.
Purpose-level opt-in rates: CookieBeam tracks choices per cookie category -- analytics, marketing, preferences. A typical pattern: 60% accept analytics, 45% preferences, 25% marketing. That granularity tells you where to focus copy improvements.
Banner variant performance: If you run A/B tests, consent rates display per variant alongside engagement metrics. Track the reject rate alongside acceptance -- a variant with 70% acceptance and only 5% rejection is probably confusing visitors, not persuading them.
Device breakdown: Desktop vs. mobile consent rates. If the gap exceeds 10 points, your banner needs mobile-specific optimization.
Effective coverage calculation: Combine CookieBeam's consent data with GA4's modeling coverage reports (GA4 Admin > Data Collection > Consent Mode) monthly. A consent rate improvement from 42% to 55% can push effective coverage from 77% to 85% -- a meaningful improvement that compounds across every report and campaign decision.

Key Takeaways

Region dominates. Opt-in vs. opt-out is the single biggest determinant. A 42% rate is average in the EU; the same rate in the US signals a serious problem.
Industry sets the range; optimization places you within it. Healthcare will never hit e-commerce rates, and that's fine. What matters is where you sit within your industry's expected range.
Effective data coverage > raw consent rate. A 50% consent rate with proper Consent Mode produces 80%+ effective coverage. Ensuring correct Consent Mode integration matters more than pushing raw acceptance higher through questionable design.
Account for GPC. In US markets, your reported acceptance rate overstates effective opt-in by 15-20 percentage points once GPC is factored in.
Below 25% is a data emergency. GA4's modeling becomes unreliable without enough consented data to build patterns. That's a measurement crisis, not an optimization opportunity.

Check where your rates fall against these benchmarks for your industry and region. Below the range? See the consent rate optimization guide for legitimate techniques. Within or above? Focus on effective coverage and Consent Mode quality rather than raw consent rate.