Consent & Privacy Management Technologies & Software

Yes. The EU's ePrivacy Directive and GDPR require websites to get informed consent before setting non-essential cookies for European visitors. You can't use pre-ticked checkboxes, and you must offer a genuine option to decline. Our database tracks over 117,000 domains using Cookiebot and 129,000 using Usercentrics — both focused heavily on EU compliance. Fines for non-compliance can reach 4% of annual global turnover under GDPR.

GDPR requires consent that is freely given, specific, informed, and unambiguous. Users must actively opt in — no implied consent from continued browsing. You need to explain what data you collect, why, and who receives it. Users must be able to withdraw consent as easily as they gave it. Cookie consent platforms like Cookiebot (117,636 domains) and CookieYes (108,415 domains) automate this by detecting cookies and generating compliant banners.

In the EU, yes — if your site uses non-essential cookies. In the US, California's CCPA requires a 'Do Not Sell' option but not a traditional cookie banner. Colorado and Connecticut mandate recognition of Global Privacy Control signals (648,833 domains implement GPC). Many sites display banners globally to avoid geo-fencing complexity. Our data shows 1.2 million domains use FLoC Opt-Out headers as a simpler privacy measure alongside formal consent tools.

A compliant banner needs: a clear explanation of what cookies you use and why, separate consent options for different cookie categories (necessary, analytics, marketing), an accept button and a reject button of equal prominence, and a link to your full cookie policy. Tools like Complianz (208,906 domains) and Cookie Notice (153,352 domains) generate these elements automatically for WordPress sites. Avoid dark patterns — hiding the reject option violates GDPR guidance.

Complianz leads by raw installations with 208,906 active domains, though it's a WordPress plugin rather than a standalone CMP. Among dedicated consent management platforms, Usercentrics tops our tracking at 129,302 domains, followed by Cookiebot at 117,636 and Cookie Consent by Osano at 110,047. CookieYes has 108,415 domains. Cookie Notice adds another 153,352 WordPress installations. The market is fragmented — no single tool dominates across all website types.

Several quality options are free. Cookie Notice and Complianz offer free WordPress plugins. Cookie Consent by Osano is a free open-source JavaScript snippet. CookieYes starts at $10/month with a free tier. Cookiebot is free for sites with under 100 pages and charges from about $14/month after that. Usercentrics and OneTrust (Optanon) target enterprises with custom pricing — expect $200-2,000+/month for large multi-domain deployments.

Both are Google-certified CMPs, but they target different segments. Cookiebot (117,636 domains) was acquired by Usercentrics and focuses on enterprise GDPR compliance with automatic cookie scanning. CookieYes (108,415 domains) positions itself as more affordable with plans from $10/month and claims 1.5 million total websites. Cookiebot customers include Deloitte, McDonald's, and Capgemini. CookieYes counts Novartis, Sony, and Intuit among its users.

Technically, federal US law doesn't require cookie consent banners. But California's CCPA, Colorado's CPA, and Connecticut's privacy laws require honoring Global Privacy Control signals — we track 648,833 domains implementing GPC. If you run ads, the NAI framework (187,223 domains) and YourAdChoices (157,211 domains) add self-regulatory opt-out requirements. A lightweight CMP is good insurance even for US-only sites as state laws keep expanding.

Global Privacy Control (GPC) is a browser signal that automatically tells websites 'don't sell or share my data.' We detect it on 648,833 active domains. California's CCPA and Colorado's privacy law legally require businesses to honor GPC. Major browsers including Firefox, Brave, and DuckDuckGo support it. If you have California or Colorado customers, you should implement GPC recognition. Tools like Cookiebot and Usercentrics can detect and respond to GPC signals automatically.

Install one of the top WordPress cookie plugins: Complianz (208,906 domains) auto-detects cookies and generates region-specific banners. Cookie Notice (153,352 domains) is simpler — good for sites that just need a basic consent bar. For more control, CookieYes offers granular category management from $10/month. Whichever tool you pick, configure it to block non-essential cookies until consent is given, not just display a notice. A banner that doesn't actually block cookies isn't GDPR-compliant.