Cookie Consent Compliance

What is a CMP?

A CMP (Consent Management Platform) is software that manages the cookie banner, blocks scripts prior to consent, and stores user choices.

Is a "Reject All" button mandatory?

Yes, rejecting must be as easy as accepting. The "Reject" button should be on the same layer and visibility as "Accept."

What is a Cookie Wall?

This is a practice where a site blocks access until you agree to cookies. This is illegal.

How long is consent valid?

Typically, consent is valid for 6-12 months, after which the banner must reappear.

Reading Time

2 min

Published

...

Cookie Consent Management and CMP Implementation Services

Obtaining consent for cookie usage (Consent Management) is one of the most critical parts of website compliance. An incorrect consent mechanism—such as a banner that offers no real choice or has pre-ticked boxes—is a violation of the law. This service focuses not just on the policy text, but on the technical and legal implementation of consent. We help companies deploy Consent Management Platforms (CMPs) that ensure user preferences are correctly recorded and stored.

The Cookie Consent Compliance service includes:

  • CMP Selection and Configuration: Choosing an appropriate platform (e.g., OneTrust, Cookiebot) and legally configuring it to block cookies prior to consent.
  • Granular Consent: Designing a banner that allows users to consent to specific types of cookies (e.g., only analytics but not marketing).
  • Consent Logging: Implementing a system to store proof that a specific user gave consent at a specific time (essential for audits).
  • Easy Withdrawal: Placing a "Cookie Settings" button on the website so users can change their choices at any time.
  • Cookie Wall Prohibition: Checking that the site does not use a "Cookie Wall" (blocking access without consent), which is impermissible under European and Georgian standards.

Practical example: A user enters a site and sees a banner "Accept All." There is no "Reject All" or "Settings" button at the same level. This is a "Dark Pattern" and a violation. Another example: A user rejects cookies, but the site still sends data to Facebook. This means the CMP is misconfigured. Our experts audit these technical nuances.

The legal basis is Article 6 (Consent) of the Law of Georgia on Personal Data Protection and principles of the ePrivacy Directive. Consent must be voluntary. If you force a user to consent to view the site, that consent is invalid.

Collaboration with lawyers and technical teams ensures your consent mechanism is real, not just visual decoration. This protects you from fines and builds user trust.

Legal.ge offers CMP implementation services. Make consent management a simple and automated process with our help.

Updated: ...

Specialists for this service

Loading...