Guides → Google Ads for eCommerce
Guide · Measurement

Consent Mode and GDPR: the minimum an eCommerce store needs

By Rodrigo Kato7 min readUpdated September 2026
The short answer

If you advertise to EU shoppers, consent is not optional. The minimum: a proper consent banner (a CMP) that blocks analytics and ads cookies until the user agrees, Consent Mode v2 wired so Google receives the consent signals and can model the gaps, and tags that do not fire before consent. Get it wrong and you are either non-compliant or your conversion data quietly collapses, a classic hidden cause of a falling ROAS. This guide is a plain overview, not legal advice.

Consent Mode sounds like a compliance chore, and it is, but for an eCommerce store it is also a measurement issue with real money attached. Set up badly, it either exposes you to legal risk or silently breaks the conversion data your bidding depends on. Set up well, it keeps you compliant while preserving as much of your tracking as the rules allow. Here is the minimum you need to understand.

Why this matters (three reasons at once)

What Consent Mode actually does

Consent Mode is the bridge between your consent banner and Google's tags. Instead of tags being simply on or off, they adjust their behaviour to the user's choice:

Version 2 added the specific consent signals (for ad storage, analytics storage, and ads user data and personalisation) that Google now needs for its EEA ads features. The practical upshot: with Consent Mode wired up, declining users are not simply lost, a good chunk of that signal is recovered through modelling.

The minimum setup

PieceWhat it does
A consent banner (CMP)Captures the user's choice. Ideally a Google-certified Consent Management Platform, so it speaks Google's consent signals natively.
Gated tagsAnalytics and ads tags must not set cookies or fire until consent is given. No firing before the click.
Consent Mode v2Passes the consent state to Google's tags so they adjust behaviour and Google can model the declined conversions.
A clear privacy policyExplains what you collect and why, linked from the banner.

That is the baseline for a store advertising into the EU. The exact implementation (CMP choice, tag manager wiring) varies, but those four pieces are the non-negotiables.

The two ways it goes wrong

Almost every bad consent setup fails in one of two opposite directions:

Failure 1, non-compliant: tags fire before consent, so you are recording data you were not allowed to collect. Legal risk, and increasingly, rejected by browsers and Google anyway. Failure 2, collapsed tracking: the banner blocks everything with no Consent Mode behind it, so every declining user vanishes from your data, conversions crater, ROAS looks broken, and Smart Bidding starts optimising on a fraction of the truth.

The goal is to sit between them: block until consent (compliant) and run Consent Mode so the declined users are modelled rather than erased. This is also why a consent change is one of the first things to check behind a sudden ROAS drop, or a widening gap between Google Ads and GA4.

What about Brazil and the rest of the world?

The rule follows your customers, not your address. If you advertise to or have users in the EEA or UK, you must meet EU consent rules regardless of where the business sits, so a Brazilian or US store selling into Europe still needs a compliant setup and Consent Mode for that traffic. And Brazil's own LGPD runs on a similar logic, so a clean consent setup serves you at home as well as abroad.

One honest caveat: this is a plain-English overview to help you get the setup right, not legal advice, check the specifics with a professional for your situation.

Not sure whether your consent setup is compliant, or whether it is quietly starving your conversion data? A free audit checks that your banner, tags and Consent Mode are set up so you stay compliant without wrecking the numbers you bid on.

Frequently asked

Do I need Consent Mode for Google Ads in the EU?

In practice, yes. If you have users in the European Economic Area or UK, EU rules require consent before you set analytics or advertising cookies, and Google requires Consent Mode v2 for its ads personalisation and measurement features to keep working properly for that traffic. Without it, you risk both non-compliance and degraded conversion data. It is effectively a requirement for any store advertising to EU shoppers, not an optional extra.

What is Consent Mode v2?

Consent Mode is a Google framework that lets your tags adjust their behaviour based on whether the visitor granted consent. Your consent banner tells Google's tags the user's choice through consent signals; when a user declines, the tags send anonymous, cookieless pings instead of full data, and Google uses modelling to estimate the conversions it can no longer directly observe. Version 2 (v2) added the specific consent signals Google now requires for ads features in the EEA.

Will a cookie consent banner hurt my conversion tracking?

It reduces the conversions you can directly observe, because some users decline, but done correctly it does not have to wreck your data. With Consent Mode set up, Google models the conversions from users who declined, recovering much of the lost signal. The real damage comes from a broken setup, tags that fire before consent (non-compliant) or a banner that blocks everything with no Consent Mode behind it (collapsed data). Correct consent plus Consent Mode is the balance.

Do I need Consent Mode if my store is outside the EU?

It depends on who your customers are, not where you are. If you advertise to or have users in the EEA or UK, you must follow EU consent rules regardless of where the business is based, so a Brazilian or US store selling into Europe still needs a compliant consent setup and Consent Mode for that traffic. Brazil's own LGPD is similar in spirit, so a clean consent setup serves you at home too.

What is the minimum consent setup for an eCommerce store?

Three things: a proper consent banner (a Consent Management Platform, ideally a Google-certified CMP) that captures the user's choice; tags that do not fire analytics or ads cookies until consent is given; and Consent Mode v2 wired so Google receives the consent signals and can model the gaps. Add a clear privacy policy. That combination keeps you compliant while preserving as much measurement as the rules allow.

Rodrigo Kato
Rodrigo Kato
Senior Google Ads Consultant · Watermouse
Senior Google Ads operator for European eCommerce brands (NL, UK, DE and beyond), one person on the account, no junior handoffs. More about Watermouse →
Keep reading
Google Ads vs GA4Why is my ROAS dropping?Book a free audit
Work with us

Compliant, or just losing data?

30 minutes on your actual account. We check that your banner, tags and Consent Mode keep you compliant without wrecking the numbers you bid on. No pitch until you ask for one.

Book a free audit
Book a free audit →