GDPR and Ad Tracking in the EU: What Needs Consent
What GDPR and the ePrivacy rules mean for Google Ads and Meta tracking in the EU and UK: what needs consent, what Google requires, and server-side limits.
Consent Mode v2 is required for EEA traffic. Learn basic vs advanced mode, when Google models conversions, where setups break and how to lift consent.

Consent Mode is Google’s framework for adjusting tag behavior to each visitor’s consent choices. Version 2 added two signals, ad_user_data (consent to send user data to Google for advertising) and ad_personalization (consent to personalized ads), on top of ad_storage and analytics_storage (Google, consent mode overview).
If you serve ads to people in the European Economic Area, Google requires you to collect consent from EEA users and share those consent signals with Google for ad personalization, remarketing and measurement (Google Ads Help). Without valid signals, you lose EEA users from your remarketing audiences and your measurement gets thinner.
Basic consent mode blocks Google tags until the visitor interacts with the banner. If they decline, Google receives nothing from them. Google can still model conversions, but only with a general model (Google).
Advanced consent mode loads Google tags when the page opens, with consent set to denied by default. For visitors who decline, the tags send cookieless pings with functional data such as timestamp, user agent, referrer and the consent state. Google uses these pings to build an advertiser-specific model, which it describes as improved modeling (Google).
Advanced mode gives you better modeling. Check with your legal adviser before you pick it, because it sends cookieless pings before the visitor has chosen.
The faults we see most often in audits:
Each of these looks fine in a quick check and costs you measured conversions. If you run server-side tagging, make the consent state travel with every event. Why your ad data goes missing explains how server-side tracking and consent fit together.
Google Ads conversion modeling uses observed, consented conversions to estimate the ones it can’t observe. It needs volume: Google sets a threshold of 700 ad clicks over 7 days, per country and domain grouping (Google Ads Help, consent mode modeling).
If your account sits below that, modeling won’t fill the gap. Put the effort into your consent rate, because each extra visitor who accepts is a conversion Google measures instead of estimating.
Treat the banner like any other conversion step:
You control consent rate more than any other part of measurement.
Yes. Consent Mode governs what you may collect (for the legal side, see GDPR and ad tracking in the EU). Server-side tracking gets more of the consented data to Google and Meta. Together they close more of the gap between orders in your backend and conversions in your ad accounts. To choose a server-side setup, read TAGGRS vs GTM server-side.
Review the setup each quarter and document your consent architecture. Our tracking service covers Consent Mode, CMP setup and server-side tagging, and our Google Ads management relies on that data for bidding.
For EEA traffic, Google requires you to collect consent and pass consent signals if you want ad personalization, remarketing and measurement to work for those users. Outside the EEA, it’s optional but useful wherever you run a consent banner.
Yes, but Google uses a general model. Advanced mode sends cookieless pings for visitors who decline, which lets Google build a model specific to your account.
Google sets the threshold at 700 ad clicks over 7 days, per country and domain grouping.
Yes, if your server container receives and forwards the consent state with each event. If it drops the consent state, Google can’t apply the visitor’s choice.
We use cookies for analytics and advertising. You can opt out of the sale or sharing of your data at any time.Cookie Policy
Your browser's Global Privacy Control signal is on, so we don't share your data for advertising.