Guides & Documentation
Everything you need to implement cookie consent on your website
Showing 203 guides in Compliance
DSAR Handling for Website Owners: A Practical Guide
A practical guide to handling Data Subject Access Requests under GDPR: the rights involved, how to verify identity, the one-month deadline, valid reasons to refuse, and a repeatable workflow.
Do I Need a Cookie Banner? When Cookie Consent Is Actually Required
Not every website legally needs a cookie banner, and many that show one are doing it wrong. Learn what actually triggers a consent requirement, which visitors it depends on, and how to tell whether your site needs one.
Data Processing Agreements (DPAs): What Website Owners Need to Know
Every third-party tool that handles your visitors' data needs a Data Processing Agreement. This guide explains what a DPA is, when GDPR requires one, what it must contain, and how to manage them across your stack.
Data Processing Agreements with Your CMP: What GDPR Article 28 Requires
Your CMP processes consent records, IP addresses, and device data on your behalf, making it a GDPR processor that needs a proper DPA. This guide covers what to look for, what to avoid, and how to evaluate a CMP's data processing agreement before you sign.
Data Breach and Cookie Consent: What Happens When Your CMP Gets It Wrong
Cookie consent failures don't always equal data breaches, but sometimes they do. This guide covers when unconsented cookies cross the line into a notifiable breach under GDPR, what the real enforcement landscape looks like, and how to respond when you discover cookies were set without valid consent.
Cross-Domain Consent Sharing: How to Sync Cookie Consent Across Multiple Websites
If you run several domains or a network of brand sites, asking visitors to consent again on each one is bad UX and inconsistent compliance. This guide explains how cross-domain consent sharing works and when it is legally appropriate.
Cross-Domain Consent Sharing: Technical Implementation Patterns for Multi-Site Organizations
Four concrete implementation patterns for sharing cookie consent across domains: parent-domain cookies, postMessage bridges, server-side API sync, and signed URL tokens. Covers code, security pitfalls, Consent Mode v2 per-domain firing, iframe propagation, and how CookieBeam's domain groups handle it.
Cookie Walls and "Pay or Consent": What's Actually Legal in 2026
Cookie walls and "pay or consent" models force visitors to choose between accepting tracking or losing access. Learn what the EDPB, CJEU, and national regulators have ruled, and how to design a lawful alternative.
Cookie Walls in 2026: Are 'Pay or Consent' Models Actually Legal?
The legality of cookie walls and 'pay or consent' models varies wildly across Europe. This jurisdiction-by-jurisdiction guide covers the CJEU precedent, EDPB opinion, and where each country draws the line in 2026.
Cookie Scanning vs Manual Audit: Which Approach Actually Keeps You Compliant?
Manually cataloguing every cookie your site sets is slow, error-prone, and outdated the moment you finish. Automated cookie scanning solves the discovery problem at scale. Here is how the two methods compare and when each makes sense.
Cookie Policy vs Privacy Policy: What's the Difference and Do You Need Both?
A cookie policy and a privacy policy are related but distinct legal documents. This guide explains what each one covers, why most websites need both, and exactly what to include in each.
Cookie Consent for Single-Page Apps (React, Vue, Angular): The 2026 Developer Guide
SPAs break the assumptions that cookie consent platforms were built on. This developer guide covers race conditions, route-change consent, React/Vue/Angular integration patterns, SSR hydration timing, script gating with dynamic imports, and Consent Mode v2 sequencing for SPA navigation.
Cookie Consent Penalties by Country: Maximum Fines and Enforcement in 2026
A country-by-country breakdown of cookie consent and data privacy penalties in 2026, covering maximum fines, enforcing authorities, and recent enforcement trends across GDPR, CCPA, LGPD, PIPL, DPDP, and more.
The Developer's Cookie Consent Implementation Checklist: 30 Steps to Get It Right
A 30-step technical checklist covering the full CMP implementation lifecycle: planning, script integration, Consent Mode, regional rules, testing, launch, and ongoing maintenance.
Cookie Consent for Agencies: Managing Compliance Across Multiple Client Websites
A practical guide for digital agencies managing cookie consent across 10-100+ client websites. Covers multi-client dashboards, white-label solutions, compliance templates, client reporting, pricing models, and how to turn consent management into a billable service.
Cookie Consent for Connected TV and IoT: The 2026 Compliance Frontier
Connected TVs, smart speakers, and IoT devices collect personal data but lack browsers and cookie banners. Learn how consent management works on screenless and keyboard-free platforms under GDPR, CCPA, and DPDP.
Why 67% of Consent Mode v2 Setups Fail Compliance Checks
Most Consent Mode v2 implementations fail compliance audits. This technical guide covers the common setup mistakes, the four required consent signals, Advanced vs Basic mode trade-offs, and how to test and fix your implementation.
Consent Mode v2: Advanced vs Basic: Which Should You Use?
A decision guide for choosing between Basic and Advanced Google Consent Mode v2. Understand the data-recovery trade-off, the pre-consent privacy question, and which mode fits your risk profile.
Consent Logging & Audit Requirements: How to Prove Consent Under GDPR
Collecting consent is only half the job, under GDPR you must be able to prove it. This guide explains what a defensible consent record contains, how long to keep it, and how to build an audit trail that survives a regulator's request.
Cookie Consent Expiry: How Long Does Consent Last and When to Re-Ask
Consent isn't forever. Learn how long cookie consent stays valid, what regulators recommend for re-consent intervals, and the events that should always trigger a fresh prompt.
CNIL Cookie Guidelines: France's Strict Rules Explained
France's CNIL enforces some of the toughest cookie rules in Europe, and has the fines to prove it. Learn the CNIL's specific requirements, what it has penalised, and how to make your banner France-ready.
Children's Privacy and Cookie Consent: COPPA, Age-Gating, and GDPR's Special Rules
Websites with underage audiences face stricter cookie consent rules under COPPA, GDPR Article 8, the UK Children's Code, and California's CAADC. This guide covers what's required, what cookies are permitted, and how to configure consent for children's content.
How to Build a Custom Consent Mode Template for Google Tag Manager
A step-by-step developer tutorial for building a custom Google Tag Manager template that implements Consent Mode v2 using the sandboxed template APIs: setDefaultConsentState, updateConsentState, permissions, wait_for_update, and testing.
The Biggest GDPR Cookie Fines in History: Lessons for Every Website Owner
From Amazon's €746M penalty to CNIL's relentless cookie crackdowns, the enforcement record is clear: consent violations are expensive. Here are the 10 largest fines, what triggered each one, and what every site owner should learn from them.