Vai al contenuto
Gravità: AltaResponsabile: Admin CMPTempo di correzione: 1-2 h

Incoerenza di Google Consent Mode

Correggi i casi in cui i tag Google si comportano come se il consenso fosse concesso anche se lo stato runtime indica denied.

Copre: consent_mode_mismatch, consent_mode_default_granted, consent_mode_runtime_conflict

Perché è importante

Se Consent Mode segnala denied ma richieste Analytics o Ads partono comunque, il sito crea solo un'apparenza di conformità. Di solito defaults, tag o aggiornamenti runtime sono configurati in modo incoerente.

Come verificare manualmente

  1. Open the site in a fresh session and inspect Google requests before any banner interaction.
  2. Check whether Consent Mode defaults are set to denied before Google tags initialize.
  3. Compare runtime consent state against actual network behavior after Accept and Reject.

Cause tipiche

  • Consent defaults are set too late, after Google tags already loaded.
  • GTM tags ignore consent checks even though Consent Mode is enabled.
  • Banner updates UI state but does not send a matching consent update to Google.

Correzione in GTM

  1. Use Consent Initialization for your default denied state before any analytics or ads tags run.
  2. Require consent checks on GA4, Google Ads, Floodlight, and remarketing tags.
  3. Audit custom HTML tags that may load Google scripts outside GTM consent controls.

Correzione in WordPress o plugin CMP

  1. Enable Consent Mode integration in your CMP plugin if available.
  2. Verify that plugin-generated consent events fire before GA4 or Ads plugins load.
  3. Disable duplicate analytics plugins that bypass the CMP integration.

Correzione generica lato sviluppo

  1. Initialize Google tags only after a denied-by-default consent state is established.
  2. Send explicit consent updates on accept and reject actions.
  3. Ensure fallback defaults are denied whenever consent state is unknown.

Come confermare che la correzione funziona

  • Reject optional consent and confirm that Google analytics or ads requests do not fire.
  • Accept consent and confirm requests start only after the consent update.
  • Run a fresh scan and verify the mismatch finding disappears.

Passaggio successivo

Riesegui una scansione dopo il deploy per confermare che sia cambiato il comportamento reale a runtime, non solo il testo del banner.

Incoerenza di Google Consent Mode — GDPR Fix Guide