Missing GDPR Cookie Consent
Overview
Under GDPR and ePrivacy Directive, non-essential cookies (analytics, marketing, tracking) require explicit user consent before being set. Loading analytics scripts unconditionally violates privacy law.
Remediation
- Implement a Consent Management Platform (CMP)
- Only load analytics scripts after explicit consent
- Provide granular consent options (necessary, analytics, marketing)
- Store consent records with timestamps