Compliance
GDPR Compliance Checklist
Ensure your cookie consent is fully GDPR compliant
Ensure your cookie consent implementation meets all GDPR requirements with this comprehensive checklist.
What is GDPR?
The General Data Protection Regulation (GDPR) is a European Union regulation that governs how personal data must be collected, processed, and protected. It applies to any website that collects data from EU residents.
Essential GDPR Requirements for Cookie Consent
1. Prior Consent Required
- Cookies must NOT be set before user gives consent (except strictly necessary cookies)
- Pre-ticked boxes are NOT allowed
- Scrolling or continuing to browse does NOT constitute consent
2. Clear and Specific Information
Your cookie banner must clearly explain:
- What cookies you use
- What data is collected
- Why the data is collected
- Who receives the data (third parties)
3. Granular Choice
Users must be able to:
- Accept all cookies
- Reject all non-essential cookies
- Choose specific categories (e.g., analytics, marketing)
4. Easy Withdrawal
- Users must be able to withdraw consent as easily as they gave it
- Provide a persistent link to manage cookie preferences
- GetCookies adds a floating button for this automatically
Cookie Categories Explained
| Category | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Essential website functions | No |
| Functional | Enhanced features, preferences | Yes |
| Analytics | Traffic measurement, statistics | Yes |
| Marketing | Advertising, tracking | Yes |
Implementation Checklist
- Cookie banner appears on first visit
- No tracking cookies set before consent
- Clear explanation of each cookie category
- Easy "Reject All" option visible
- Granular category selection available
- Consent can be withdrawn easily
- Cookie policy page accessible
- Consent records stored for audit
- Banner shows again if cookie policy changes
GetCookies GDPR Features
GetCookies helps you comply with GDPR by:
- Blocking scripts by default - No cookies until consent
- Consent logging - Records timestamped consent for audits
- Granular controls - Users can accept/reject by category
- Easy withdrawal - Floating preferences button
- Google Consent Mode - Proper integration with Google services
Related Regulations
- ePrivacy Directive - EU directive specifically about cookies
- UK GDPR - Post-Brexit UK version of GDPR
- Swiss DPA - Similar requirements for Switzerland
Still stuck?
Email [email protected] with your domain and what you tried. Signed-in customers can also open a ticket from the dashboard.