Privacy compliance is not a moment in time — it’s an ongoing requirement for all companies. However, Google’s rules for businesses using its services, including the use of Consent Mode v2, add another layer to an already complex set of data privacy obligations. For many businesses, that can feel daunting.
The good news is that Google Consent Mode’s requirements overlap significantly with those of the General Data Protection Regulation (GDPR), the Digital Markets Act (DMA), and other major data privacy frameworks. Meeting one set of criteria often moves you closer to compliance with the others.
With DMA enforcement now well established in the EU, businesses using these services are under increasing pressure to meet higher privacy standards. If you haven’t acted yet, the window to get ahead of these requirements is narrowing.
Implementing Google Consent Mode correctly helps you retain access to Google’s analytics and advertising tools, satisfy regulatory requirements, and build the kind of transparency that earns user trust. This guide covers what Consent Mode is, what it means for your business, and how to implement it.
At a glance
- Google Consent Mode v2 is a signaling tool that adjusts how Google tags behave based on a user’s consent choices
- Google Consent Mode supports Google Analytics 4 (GA4), Google Ads, Floodlight, and Conversion Linker
- There are two Google consent mode implementation modes: Basic and Advanced, each suited to different business needs
- Consent Mode alone does not make you GDPR-compliant; a consent management platform (CMP) is needed to collect valid consent
What is Google Consent Mode v2?
At its core, Google Consent Mode v2 is a signaling tool that tells Google’s tags how to behave based on whether a user has consented to cookies. It is now a core requirement for businesses using Google’s advertising and analytics services in the EU/EEA.
The tool was originally used primarily for anonymized data tracking. Its purpose has evolved considerably, and today’s Consent Mode v2 functions as a dynamic communication layer between your consent management platform (CMP) and Google’s services.
“Google Consent Mode allows websites to adjust the Google tag behavior based on user consent for ads and analytics, ensuring compliance with laws like the DMA. It dynamically manages data collection, using signals that can employ data modeling to fill gaps when consent is denied. When a user visits a website, a cookie banner asks for consent to use cookies, and based on the user’s choice, Consent Mode will adjust the behavior of Google tags,” – Tilman Harmeling, Senior Expert, Privacy at Usercentrics.
Therefore, a user’s consent choices, recorded in the CMP, determine whether Google collects full data or anonymized data that cannot personally identify them.
It’s worth noting that the DMA only requires designated gatekeepers like Alphabet to comply directly. But because Alphabet needs its business customers to meet privacy requirements too, companies using Google’s services must signal consent correctly — or risk losing access to the features they rely on.
“The biggest adjustments are the additional storage types for more granular advertising options regarding whether user data can be used for advertising purposes. The more granular options support Google’s conversion optimization and with that monetization through ads in general,” – Tilman Harmeling, Senior Expert, Privacy at Usercentrics.
What services does Google Consent Mode v2 support?
Google Consent Mode v2 is designed specifically to bridge the gap between privacy regulations and data-driven marketing. It allows Google tags to adjust their behavior based on the consent status provided by the user and is supported by the following Google services:
- Google Analytics 4 (GA4)
- Google Ads [including Search, Display, Video, and Demand Gen campaigns (formerly Discovery Ads)]
- Floodlight (DV360 and Search Ads 360)
- Conversion Linker
Why is Google Consent Mode valuable?
The core value of Consent Mode is practical: without it, Google significantly limits what website operators can track. But there is an upside beyond compliance.
- Retain conversion tracking even when users decline cookies: Google’s AI fills data gaps with modeled conversions, so your campaigns stay measurable.
- Keep full access to GA4 and Google Ads features: Consent Mode is a prerequisite for the full functionality of Google’s advertising and analytics tools in the EU/EEA.
- Improve consent rates over time: Aggregated insights from non-consenting users give you the data to optimize your consent banner and increase opt-ins.
- Build user trust through transparency: Giving users clear, granular control over their data is both legally required and increasingly expected.
- Establish a competitive advantage: Get an edge over competitors that are still grappling with outdated tracking methods by building on a foundation of consented, durable data.
“Without Consent Mode, your tracking capabilities are significantly limited by Google. But there is a real upside too: Google’s AI can model conversions from users who declined cookies, keeping analytics and advertising viable even without full consent. Businesses that implement this correctly are not just staying compliant, they’re building the kind of measurement foundation that holds up long term.” — Tilman Harmeling, Strategy & Market Intelligence at Usercentrics.
Third-party tracking is becoming structurally less reliable. Safari blocks it by default. Firefox restricts it. Chrome has introduced user-facing controls that give people more say over what follows them across the web. Regulations continue to tighten. The infrastructure that digital marketing depended on for two decades is eroding — not all at once, but steadily and without reversal.
The businesses building durable marketing infrastructure are not waiting for a forcing event. They are shifting now toward consented first-party data, tools that work within privacy constraints rather than around them, and measurement approaches that hold up regardless of what browsers or regulators do next.
Google Consent Mode is part of that infrastructure. It’s the layer that connects user consent to Google’s services and keeps your data collection both compliant and operational.
How does Google Consent Mode v2 work?
Google tags load onto web pages before the cookie consent banner appears. Consent Mode bridges that gap: it holds tags in a waiting state, then adjusts their behavior once the user makes a choice.
Consent Mode v2 uses four tag settings to manage this:
- analytics_storage: controls how analytics services like GA4 behave
- ad_storage: controls how ad services like Google Ads behave
- ad_user_data: controls whether personal data is sent to Google services
- ad_personalization: controls whether data can be used for ads personalization, such as remarketing
The first two settings were present in the original version. The latter two were introduced in v2 to provide more granular control over how personal data is used for advertising, a direct response to DMA requirements.
When users decline cookies, website owners can still use conversion modeling to gather insights from anonymized data, keeping analytics and campaign optimization viable even with partial consent.
A CMP handles the consent collection side automatically. For instance, with Usercentrics CMP, all cookies and trackers on your site are detected and categorized. Users can accept all, reject all (except strictly necessary), or choose their preferences individually — and those choices are passed to Google’s tags in real time.
Google Consent Mode basic vs advanced
Consent Mode v2 offers two levels of implementation. The right choice depends on your business size, the complexity of your data practices, and how much control you need.
| Feature | Basic Mode | Advanced Mode |
| How it works | Tags stay “off” until a user clicks “Accept.” | Tags “wake up” immediately but stay restricted. |
| Data visibility | Has visible gaps. If a user ignores the banner, you see nothing. | Includes smart recovery. Uses AI to fill in the blanks if a user says no. |
| Setup effort | Quick and “set it and forget it.” | Requires a bit more attention to your tag settings. |
| Best for | High-privacy industries (Finance, Health). | Performance marketing & Google Ads optimization. |
Google Analytics Consent Mode
For GA4, Consent Mode uses the analytics_storage tag to determine how the platform behaves based on user choices.
When a user consents to analytics cookies, GA4 collects full behavioral data. When they decline, and you are using Advanced Mode, GA4 limits collection to non-identifiable information: browser type, operating system, and referrer source. No personally identifiable data is recorded. If you are using Basic Mode, no data is sent to GA4 at all if a user declines.
Read more:Google Ads, GA4, and consent management
Consent Mode for Google Ads
For Google Ads, the ad_storage tag governs behavior. With consent, full advertising data is collected, and campaigns can be personalized. Without it, Google Ads tags do not use advertising cookies, and any ads shown to that user will not be targeted based on their data.
What is conversion modeling?
When users decline cookies, gaps appear in your analytics. You lose visibility into how those users behaved and whether they converted. Google uses machine learning to fill those gaps through conversion modeling.
The model studies patterns from users who consented, then estimates the behavior of those who did not. The result is a statistically informed view of campaign performance, even when full consent data is not available.
This matters for revenue. Businesses that would otherwise see significant drops in reported conversions can maintain enough visibility to make informed decisions. And because higher consent rates produce more accurate models, there is a direct business incentive to invest in consent rate optimization.
Learn more about conversion modeling in the privacy-first era
How to implement Google Consent Mode
If your company is doing business in the EU, UK, or Switzerland, you need Google Consent Mode implemented to retain full access to Google’s analytics and advertising services. There are two main ways to do it.
The most practical route for most businesses is to use a CMP with Google Tag Manager (GTM). The other option is direct integration using the Interactive Advertising Bureau’s (IAB) Transparency and Consent Framework (TCF v2.3), which suits publishers and businesses already operating within that ecosystem.
Google Consent Mode and Google Tag Manager
GGoogle Consent Mode can be integrated with Google Tag Manager (GTM) in two ways, depending on whether your website uses a CMP.
- With a CMP: Use the CMP’s GTM template, which is integrated directly with the Consent API. This can be done from within Google Tag Manager itself, requires minimal coding, and saves website owners significant time and effort in both setup and ongoing maintenance.
- Without a CMP: Create a custom GTM template, which requires coding knowledge and the help of a developer to build, implement, and update as requirements change.
Once Google Consent Mode and GTM are integrated, user consent choices recorded in the CMP’s banner are passed to Google Tag Manager, which then governs how cookies behave for each user’s visit. This integration helps ensure all tags and tracking tools respond correctly to user consent preferences.
The two paths are not equal in practice. Implementing Consent Mode without a CMP gives you more flexibility in theory, but it demands significantly more technical expertise, and any changes to Google’s requirements or your own tag setup will need to be handled manually by a developer.
Using a CMP with Google Consent Mode removes that dependency. Consent preferences are automatically communicated to Google as soon as a user makes a choice, with no ongoing developer input required.
Google Consent Mode v2 and the TCF v2.3
For businesses already using the IAB Transparency and Consent Framework (TCF v2.3), Google tools will continue to read and respect the IAB TC String. This means consent preferences expressed through a TCF-compliant CMP are automatically honored across Google Analytics, Google Ads, and all other integrated Google services — no additional configuration required.
TCF v2.3 became mandatory on 28 February 2026. If you are using a TCF-compliant CMP, confirm it has been updated to generate v2.3 strings.
Learn more about TCF v2.3, including what the framework requires and what it means for publishers using Google’s services.
How to implement Google Consent Mode with the Usercentrics CMP
For most websites, implementation comes down to connecting your consent banner to Google’s tag infrastructure so that user choices are passed through automatically. These steps reflect the most common setup and show how to implement Google Consent Mode using a CMP.
✔ Adjust your existing GTM code by adding a few lines above your Google Tag Manager tag to initialize Consent Mode before any tags fire.
✔ In your CMP’s admin interface, confirm that Google Consent Mode is enabled — for most platforms this is a toggle, not a code change.
✔ If you use custom Data Processing Services, use your CMP’s event system to signal consent status via the Consent Mode API.
✔ Test the setup using Google Tag Assistant or GTM’s preview mode to confirm that consent signals are being passed correctly before going live.
There is also a convenient feature that automates the process of enabling Google Consent Mode in Usercentrics CMP. So you can get it up and running in two easy steps.
Google Consent Mode v2 is integrated by default. Collect valid consent from EU/EEA users and signal it to Google automatically, right from installation.
Does Google Consent Mode make you GDPR-compliant?
By this point, we’ve established that Google Consent Mode signals user consent choices to Google’s tags and adjusts how those tags behave. What it does not do is collect consent in the first place. That distinction matters because many businesses assume that implementing Consent Mode is enough to satisfy the GDPR. It is not.
The GDPR requires consent to be prior, informed, freely given, and specific. Meeting those standards requires a properly configured consent banner — one that gives users genuine choice and records their preferences in a legally valid way. Without a CMP handling that process, Consent Mode has nothing meaningful to signal.
DMA enforcement adds a further layer for EU/EEA businesses. With Alphabet designated a gatekeeper under the DMA, Google now requires businesses using its services to demonstrate compliant consent collection. Consent Mode is part of how that compliance is evidenced, but only when paired with a CMP that handles the consent work correctly.
This is why pairing Consent Mode with a CMP is not optional if you want to be compliant. A CMP handles what the GDPR requires: the banner, the granular choices, and the record of consent. Then Google Consent Mode handles what Google requires: the signal that tells its tags how to behave.
Google began enforcing this requirement in March 2024, which means that for businesses yet to implement Consent Mode v2, the data loss is not a future risk. It is already happening.
In the U.S., privacy law operates differently from the GDPR: most state laws require notice and opt-out rights rather than prior opt-in consent, so the consent collection obligations are not equivalent.
However, Google’s requirements are not jurisdiction-specific. If your business serves users in the EU/EEA or UK — regardless of where you are headquartered — you need Consent Mode v2 implemented and a CMP in place to collect valid consent from those users.
For U.S. companies running Google Ads campaigns targeting European audiences, that requirement has also been in effect since March 2024.
Learn more about the 8 leading consent management platforms.
And the GDPR penalties for getting this wrong are significant and include up to €20 million or 4% of global annual turnover.
“Without Consent Mode, website operators’ tracking capabilities will be highly limited by Google. And beyond the practical impact on tracking, there is the compliance dimension: businesses in the EU/EEA need to be able to demonstrate valid consent, not just signal that they have it.” – Tilman Harmeling, Senior Expert, Privacy at Usercentrics.
Anonymous tracking via Google Analytics 4: Is it GDPR-compliant, even without consent?
According to Google, when a user denies consent for analytics tracking (analytics_storage: denied), GA4 anonymizes all collected data. No client ID is assigned, and information is captured in aggregated form only — no individual can be identified from it.
Similarly, when advertising cookie placement is denied (ad_storage: denied), the main processing purposes that typically require consent are no longer active. Data collected under these conditions is not used for personalized advertising.
For this anonymized data to hold up from a GDPR perspective, three conditions generally need to be met:
- The data cannot identify an individual
- The data is not forwarded to third parties
- The data is not transferred to third countries in a way that creates additional compliance exposure
These conditions align with how Consent Mode is designed to operate when configured correctly. But correct configuration still requires a CMP to ensure proper cookie consent is gathered, and that your privacy policy accurately reflects your data practices.
How AI and conversion modeling fill the consent gap
Even with Consent Mode in place, not every user will say yes to cookies. There will always be some website visitors who will decline, and when they do, traditional tracking stops. That creates a gap between the data you can see and the full picture of what is happening on your site.
Smart Recovery in Google Consent Advanced Mode was built to solve this. Google uses machine learning to fill those gaps: the model studies behavioral patterns from users who did consent, then uses that data to estimate what non-consenting users likely did. It does not replace data, but it provides a statistically sound approximation that keeps your campaign measurement and optimization viable.
In Basic Mode, Google tags do not fire until consent is given, so no pre-consent data is collected at all, leaving conversion modeling with significantly less to work from. However, with advanced features in place, that visibility is largely preserved. With it, you retain enough visibility to make accurate decisions on budget, bidding, and creative.
Higher consent rates also produce better models. The more consented data Google has to learn from, the more precise its estimates become. That makes improving your consent rate a direct performance issue, not just a compliance task. And a good reason to invest in how your consent banner is designed, positioned, and configured.
It also connects to a wider shift in how marketers think about data quality: the move toward zero-party and first-party data as the more reliable, more sustainable alternative to tracking that depends less on third-party cookies.
How Usercentrics CMP powers Google Consent Mode compliance
With valid consent collection in place, companies and marketing teams can optimize opt-ins, measure conversions, and retrieve analytics insights with Google Consent Mode v2 while achieving and maintaining GDPR compliance.
Google Consent Mode combines the protection of users’ data with the needs of businesses and the advertising industry. Companies can collect the customer data they need to improve marketing performance while respecting user privacy choices, and users retain control over how their data is used.
To make this work in practice, websites need a reliable way to capture consent and pass those signals to Google’s services in the correct format. This is where a Google-certified consent management platform (CMP) simplifies implementation.
As a Google-certified CMP, Usercentrics CMP is validated to work with Google’s consent signaling framework and integrates directly with Google Tag Manager through a low-code setup. Once implemented, user choices are automatically communicated to Google services so tags respond immediately to consent preferences.
Usercentrics also includes built-in consent rate optimization tools that help teams test and improve banner performance over time. Higher consent rates improve the accuracy of Google’s conversion modeling and analytics insights.
In addition, Usercentrics supports both Basic and Advanced Google Consent Mode, giving companies the flexibility to choose the setup that best matches their compliance strategy and measurement needs.
Join our growing community of data privacy enthusiasts now. Subscribe to the Usercentrics newsletter and get the latest updates right in your inbox.
