Compliance guidance
Review GDPR and US privacy consent behavior
Use a structured test matrix for category choice, withdrawal, GPC, disclosures, and downstream behavior.
Last reviewed September 12, 2026
Use CookieWall to test what the browser does before consent, after each choice, after withdrawal, and when Global Privacy Control is enabled. The results are technical evidence. The legal standard still depends on the visitor, jurisdiction, processing purpose, disclosure, and your organization’s obligations.
Run a consent review
- 1.
Define scope
List the regions, pages, visitor states, devices, and business purposes that the review covers.
- 2.
Review the notice
Confirm the banner text, privacy-policy link, category descriptions, provider names, and language variants are accurate for that scope.
- 3.
Test equal access to choices
Verify Accept All, Reject All, and Customize are available and usable, including by keyboard and on mobile.
- 4.
Test pre-consent behavior
Observe cookies, storage, scripts, and requests before any choice and compare them with the Strictly Necessary classification.
- 5.
Test withdrawal
Use the site-provided privacy-settings control to change an earlier choice and verify the downstream effect.
- 6.
Test GPC separately
Confirm the browser signal disables Marketing and reaches each configured advertising platform.
- 7.
Preserve the record
Record the project, hostname, time, pages, browser state, configuration, observed results, reviewer, and unresolved gaps.