How do you set up a consent management platform?

A Consent Management Platform (CMP) has become essential for websites that use cookies and want to comply with privacy laws. By managing user consent correctly, you protect not only your visitors but also your organization from potential fines. Below is a step-by-step guide to setting up a CMP.
Want to stop relying on third-party cookies?
Or

1. Choose the right CMP

Start with a CMP provider that fits your needs. Popular options such as Cookiebot and CookieCode offer different functionalities. Consider:

  • The size of your website
  • Your budget
  • Integration capabilities with your existing systems
  • Support for international law if you operate globally
  • Reporting capabilities

2. Create an account

After choosing an appropriate CMP, you create an account on the platform. This process typically includes:

  • Completing company information
  • Selecting a subscription
  • Linking your domain(s)

3. Configure your CMP settings.

Now you can start configuring your CMP:

  • Add your privacy policy and cookie policy
  • Define cookie categories (necessary, preferences, statistics, marketing)
  • Set the retention period of consents
  • Configure language settings for international visitors
  • Determine what information you want to collect and for what purposes

4. Adjust visual settings

Make sure your cookie banner is consistent with your brand identity:

  • Choose colors that match your corporate identity
  • Customize fonts
  • Determine the position of the banner (make sure it is un-negotiable)
  • Make the texts user-friendly and clear
  • Provide clear action buttons
  • Make sure not to set a misleading cookie banner

5. Deploy via Google Tag Manager

Integrate your CMP with Google Tag Manager (GTM):

  • Log in to your GTM account
  • Create a new tag for your CMP (via script or via tag template)
  • Set it to trigger on Consent Initialization

6. Configure Consent Overview in GTM.

Set the consent overview settings in GTM:

  • Create variables that track permission status
  • Create custom triggers that activate only when permission is obtained
  • Configure all marketing and analytic tags to load only upon permission
  • Make sure Google Analytics and other tools work with Consent Mode v2

7. Test thoroughly

Before you go live, extensive testing is crucial:

  • Check that the banner displays correctly on different devices
  • Verify that cookies are placed only after consent is obtained
  • Test different user scenarios (accept, reject, partially accept)
  • Verify that all marketing tools respond correctly to different permission levels
  • Ensure cookie banner meets accessibility requirements

By carefully following these steps, you will create a compliant, user-friendly consent management system that both respects your visitors' privacy and supports your marketing goals.

Back to
What is a Consent Management Platform?

Most common questions

How do you set up Cookiebot?
How do you set up Cookie Code?
How do you set up Google Tag Manager's consent overview settings?
Which Consent Management Platform should I choose?