Skip to content
Severity: HighOwner: DevTime to fix: 1-2 h

Cookie wall

Remove patterns that block access to content until the visitor accepts optional tracking.

Covers: cookie_wall

Why this matters

EDPB Opinion 05/2020 treats cookie walls as invalid for consent to non-essential processing because users are forced to accept tracking to access content.

How to verify manually

  1. Open the site without interacting with the banner and try to access core content.
  2. Click Reject and check whether content remains blocked or blurred.
  3. Inspect frontend logic for overlays, scroll locks, or disabled content containers.

Typical root causes

  • Banner script ties content visibility to Accept instead of any user decision.
  • Theme or SPA route guards wait for opt-in before rendering content.
  • Optional services are mixed with baseline site functionality.

GTM fix

  1. Remove logic that blocks content until marketing or analytics consent is accepted.
  2. Keep the banner visible while allowing access with only essential cookies.
  3. Trigger non-essential tags only after explicit opt-in.

WordPress fix

  1. Disable plugin options that lock content behind consent.
  2. Ensure pages remain accessible after Reject or Close actions.
  3. Retain consent records without gating core content access.

Generic fix

  1. Allow baseline site functionality regardless of non-essential cookie choice.
  2. Use consent only as a switch for optional processing.
  3. If relying on legitimate interest for essential cookies, document scope and avoid blending with marketing controls.

How to confirm the fix worked

  • Reject optional cookies and confirm content remains visible and usable.
  • Confirm only optional processing is disabled, not the page itself.
  • Run a fresh scan and verify the cookie-wall finding disappears.

Next step

Re-scan after deployment to confirm that the runtime behavior changed, not just the banner copy.

Cookie wall — GDPR Fix Guide