Gravità: AltaResponsabile: Admin CMPTempo di correzione: 1-2 h
Incoerenza di Google Consent Mode
Correggi i casi in cui i tag Google si comportano come se il consenso fosse concesso anche se lo stato runtime indica denied.
Copre: consent_mode_mismatch, consent_mode_default_granted, consent_mode_runtime_conflict
Perché è importante
Se Consent Mode segnala denied ma richieste Analytics o Ads partono comunque, il sito crea solo un'apparenza di conformità. Di solito defaults, tag o aggiornamenti runtime sono configurati in modo incoerente.
Come verificare manualmente
- Open the site in a fresh session and inspect Google requests before any banner interaction.
- Check whether Consent Mode defaults are set to denied before Google tags initialize.
- Compare runtime consent state against actual network behavior after Accept and Reject.
Cause tipiche
- Consent defaults are set too late, after Google tags already loaded.
- GTM tags ignore consent checks even though Consent Mode is enabled.
- Banner updates UI state but does not send a matching consent update to Google.
Correzione in GTM
- Use Consent Initialization for your default denied state before any analytics or ads tags run.
- Require consent checks on GA4, Google Ads, Floodlight, and remarketing tags.
- Audit custom HTML tags that may load Google scripts outside GTM consent controls.
Correzione in WordPress o plugin CMP
- Enable Consent Mode integration in your CMP plugin if available.
- Verify that plugin-generated consent events fire before GA4 or Ads plugins load.
- Disable duplicate analytics plugins that bypass the CMP integration.
Correzione generica lato sviluppo
- Initialize Google tags only after a denied-by-default consent state is established.
- Send explicit consent updates on accept and reject actions.
- Ensure fallback defaults are denied whenever consent state is unknown.
Come confermare che la correzione funziona
- Reject optional consent and confirm that Google analytics or ads requests do not fire.
- Accept consent and confirm requests start only after the consent update.
- Run a fresh scan and verify the mismatch finding disappears.
Passaggio successivo
Riesegui una scansione dopo il deploy per confermare che sia cambiato il comportamento reale a runtime, non solo il testo del banner.