Severity: HighOwner: DevTime to fix: 1-2 h
Cookie wall
Remove patterns that block access to content until the visitor accepts optional tracking.
Covers: cookie_wall
Why this matters
EDPB Opinion 05/2020 treats cookie walls as invalid for consent to non-essential processing because users are forced to accept tracking to access content.
How to verify manually
- Open the site without interacting with the banner and try to access core content.
- Click Reject and check whether content remains blocked or blurred.
- Inspect frontend logic for overlays, scroll locks, or disabled content containers.
Typical root causes
- Banner script ties content visibility to Accept instead of any user decision.
- Theme or SPA route guards wait for opt-in before rendering content.
- Optional services are mixed with baseline site functionality.
GTM fix
- Remove logic that blocks content until marketing or analytics consent is accepted.
- Keep the banner visible while allowing access with only essential cookies.
- Trigger non-essential tags only after explicit opt-in.
WordPress fix
- Disable plugin options that lock content behind consent.
- Ensure pages remain accessible after Reject or Close actions.
- Retain consent records without gating core content access.
Generic fix
- Allow baseline site functionality regardless of non-essential cookie choice.
- Use consent only as a switch for optional processing.
- If relying on legitimate interest for essential cookies, document scope and avoid blending with marketing controls.
How to confirm the fix worked
- Reject optional cookies and confirm content remains visible and usable.
- Confirm only optional processing is disabled, not the page itself.
- Run a fresh scan and verify the cookie-wall finding disappears.
Next step
Re-scan after deployment to confirm that the runtime behavior changed, not just the banner copy.