Alvorlighed: HøjAnsvarlig: CMP-adminTid til rettelse: 1-2 h
Google Consent Mode-mismatch
Ret tilfælde, hvor Google-tags opfører sig, som om samtykke er givet, selv om runtime-statusen er denied.
Dækker: consent_mode_mismatch, consent_mode_default_granted, consent_mode_runtime_conflict
Hvorfor det betyder noget
Hvis Consent Mode signalerer denied, men Analytics- eller Ads-requests stadig indlæses, skaber sitet blot et falsk billede af compliance. Typisk er standarder, tags eller runtime-opdateringer sat op inkonsistent.
Sådan verificerer du manuelt
- Open the site in a fresh session and inspect Google requests before any banner interaction.
- Check whether Consent Mode defaults are set to denied before Google tags initialize.
- Compare runtime consent state against actual network behavior after Accept and Reject.
Typiske årsager
- Consent defaults are set too late, after Google tags already loaded.
- GTM tags ignore consent checks even though Consent Mode is enabled.
- Banner updates UI state but does not send a matching consent update to Google.
Rettelse i GTM
- Use Consent Initialization for your default denied state before any analytics or ads tags run.
- Require consent checks on GA4, Google Ads, Floodlight, and remarketing tags.
- Audit custom HTML tags that may load Google scripts outside GTM consent controls.
Rettelse i WordPress eller CMP-plugins
- Enable Consent Mode integration in your CMP plugin if available.
- Verify that plugin-generated consent events fire before GA4 or Ads plugins load.
- Disable duplicate analytics plugins that bypass the CMP integration.
Generel udviklerrettelse
- Initialize Google tags only after a denied-by-default consent state is established.
- Send explicit consent updates on accept and reject actions.
- Ensure fallback defaults are denied whenever consent state is unknown.
Sådan bekræfter du, at rettelsen virker
- Reject optional consent and confirm that Google analytics or ads requests do not fire.
- Accept consent and confirm requests start only after the consent update.
- Run a fresh scan and verify the mismatch finding disappears.
Næste skridt
Kør en ny scanning efter deployment for at bekræfte, at den faktiske runtime-adfærd ændrede sig, og ikke kun bannerteksten.