Oops! We could not locate your form.
A look at some of the most popular Consent Management Platforms that are compatible with WordPress websites.
Edit: This post received a full update in May 2026, to ensure ongoing accuracy and value.
Privacy regulations like GDPR, CCPA, and PECR require website owners to inform users about cookies and allow them to actively manage their consent and preferences, by providing opt-in or opt-out functionality.
Thankfully, for WordPress, there are a range of tools available to make cookie compliance straightforward. Most of these also support Google’s Consent Mode to some extent.
Before we get into the tools, there are two recent, important regulatory updates that affect how you choose and configure your CMP, both of which are worth understanding before you make a decision.
Google Consent Mode v2 has been mandatory for EEA and UK advertisers since March 2024, but enforcement has tightened significantly throughout 2025 and into 2026. In July 2025, Google began actively disabling personalisation, remarketing, and conversion tracking for accounts without correct consent signals.
There are two implementation modes, and the difference between them matters significantly for your advertising performance. We cover these in greater detail in this post on Consent Mode.
Basic Mode blocks all Google tags until a user accepts cookies. If a user declines, you get no data whatsoever. There is no modelling, no anonymous signals, nothing. For most sites, this is the wrong choice.
Advanced Mode loads Google tags immediately but adjusts their behaviour based on consent status. When a user declines, tags send anonymised “cookieless pings”, no cookie IDs, but enough signal for Google’s AI to model estimated conversions from non-consented traffic. Advertisers implementing Advanced Mode typically see a 15–25% uplift in reported conversions through modelling alone, compared to nothing from Basic Mode.
So, when evaluating CMPs, check not just that it supports Google Consent Mode v2, but that it supports Advanced Mode specifically, and that the integration is configured correctly. A CMP that only supports Basic Mode will result in significant reporting gaps and will limit Google Ads performance in EEA/UK markets.
As of June 2026, Google has also made further changes to how consent signals interact with Google Ads data, making the CMP the primary interface between user choices and the entire Google advertising stack. Correct configuration has never been more commercially important.
If your website carries programmatic advertising or works with ad tech vendors, this update affects you directly.
The IAB Transparency and Consent Framework version 2.3 became mandatory on 1 March 2026. Every TC string generated from that date onward must include a disclosedVendors segment, a change that makes it verifiably clear which vendors were actually shown to users in the consent interface. Any TC string generated after that date without this segment is considered non-compliant.
The consequence of non-compliance is significant. Google defaults ad requests carrying invalid TC strings to Limited Ads serving, which disables personalisation, frequency capping, and audience targeting. Publishers and advertisers running non-compliant TC strings are typically seeing CPM reductions of 60–80% or more on affected inventory.
If you run any programmatic advertising in the EEA, UK, or Switzerland, your CMP must be TCF v2.3 certified and generating compliant TC strings. Most major commercial CMPs updated automatically ahead of the deadline, but if you’re running a private or self-hosted banner, or using an older/lightweight plugin, this is worth checking explicitly.
For most WordPress websites that don’t carry programmatic advertising, TCF v2.3 is less directly relevant, but Google Consent Mode v2 Advanced Mode remains important for anyone running Google Ads or using GA4.
Best for: Simple cookie banner with customisation.
Free version: Yes
Premium version: Yes (from £80/year)
Has Impact used it: Yes
Google Consent Mode v2 Advanced: Yes
TCF v2.3 certified: Yes (Pro)
Features:
Why use it:
Great for those who want a simple, clean interface with powerful compliance features that scale with your business. The free version covers the basics for most small sites; Pro adds consent logging, geo-targeting, and full TCF v2.3 compliance for those who need it.
Best for: Enterprise-grade compliance and automation
Free version: Yes (for small sites)
Premium version: Yes (Based on number of subpages, so expensive for larger sites)
Has Impact used it: Yes
Google Consent Mode v2 Advanced: Yes
TCF v2.3 certified: Yes
Features:
Why use it:
Perfect for websites with high traffic or complex cookie requirements, especially for businesses operating globally. Note that pricing scales with the number of subpages, which can make it disproportionately expensive for large sites.
Best for: All-in-one compliance (GDPR, CCPA, PECR, more.)
Free version: Yes
Premium version: Yes (from £52/year)
Has Impact used it: No
Google Consent Mode v2 Advanced: Yes
TCF v2.3 certified: Yes (Premium)
Features:
Why use it:
Complianz is a well-rounded, WordPress-native option that handles multi-region compliance particularly well. Its auto-generated policy documents are a genuine time-saver. The entirely WordPress-based architecture means no external dashboard to manage.
Best for: Visual customisation and detailed consent controls.
Free version: Yes
Premium version: Yes (from €59/year)
Has Impact used it: No
Google Consent Mode v2 Advanced: Yes
TCF v2.3 certified: Yes (Pro)
Features:
Why use it:
Ideal if design flexibility is a priority and you want fine-grained control over how and when cookies load. The WCAG 2.2 AA accessibility compliance is a useful differentiator for sites with accessibility requirements.
Best for: Enterprises needing regulatory-grade compliance and auditing.
Free version: No
Premium version: Yes (custom pricing)
Has Impact used it: No
Google Consent Mode v2 Advanced: Yes (requires some configuration)
TCF v2.3 certified: Yes
Features:
Why use it:
Ideal for organisations that require rigorous documentation, detailed audit trails, and international compliance, especially in regulated industries. Note that Google Consent Mode v2 Advanced Mode requires some additional configuration rather than working out of the box.
Best for: Agencies and public-sector websites needing accessible, branded solutions.
Free version: Yes (Basic plan)
Premium version: Yes (from £45+vat/year)
Has Impact used it: Yes
Google Consent Mode v2 Advanced: Yes (requires some configuration)
TCF v2.3 certified: Yes (Pro)
Features:
Why use it:
Cookie Control by Civic is highly customisable and well-suited for government, education, and high-trust sectors that require accessibility and transparency. The Multisite tier is particularly strong for WordPress Multisite networks. Note that Google Consent Mode v2 Advanced Mode requires some manual configuration.
Best for: Legally supported global compliance
Free version: Yes (basic plan)
Premium version: Yes (price on request)
Has Impact used it: Yes
Google Consent Mode v2 Advanced: Yes
TCF v2.3 certified: Yes
Features:
Why use it:
Osano’s key differentiator is its managed legal monitoring. The platform tracks regulatory changes and updates accordingly, which is a genuine advantage for businesses that don’t have in-house privacy expertise. If you want peace of mind and a hands-off approach to keeping up with evolving regulations, this is the safest bet.
Best for: Flexibility and multilingual websites.
Free version: Yes (limited)
Premium version: Yes (from €96/year)
Has Impact used it: Yes
Google Consent Mode v2 Advanced: Yes, and it’s worth noting Cookie Script is a Google-certified CMP
TCF v2.3 certified: Yes
Features:
Why use it:
Cookie Script holds Google-certified CMP status, which gives added confidence that its Consent Mode integration meets Google’s own standards. A strong choice for growing businesses, prioritising strong multilingual capabilities alongside verified Google compatibility.
Best for: Enterprises with advanced privacy teams.
Free version: No
Premium version: Yes (enterprise pricing – custom)
Has Impact used it: No
Google Consent Mode v2 Advanced: Yes
TCF v2.3 certified: Yes
Features:
Why use it:
OneTrust is a global leader in data compliance. It’s ideal if your organisation has privacy officers or legal teams managing compliance across multiple digital properties. t’s a significant investment, but for large enterprises the breadth of the platform, covering consent, privacy operations, and data governance, justifies it.
Best for: Simple sites needing legal basics
Free version: Yes
Premium version: Yes (from $39/one time)
Has Impact used it: No
Google Consent Mode v2 Advanced: No
TCF v2.3 certified: No
Features:
Why use it:
A good fit for blogs and small businesses that just need a simple banner and legal page generator without complex features. If you’re running Google Ads, GA4, or any third-party marketing tools, this plugin’s lack of Google Consent Mode support makes it unsuitable, you’d be leaving significant data gaps in your reporting.
Best for: Stylish, no-code consent banners.
Free version: Yes
Premium version: Yes (from €11/year or €39/one time)
Has Impact used it: Yes
Google Consent Mode v2 Advanced: Basic support, check configuration carefully
TCF v2.3 certified: No
Features:
Why use it:
Perfect for creatives and small sites that want a beautiful, branded cookie banner without needing all the bells and whistles. However, given the importance of Google Consent Mode v2 Advanced Mode for anyone running paid campaigns or relying on GA4 data, this should be reserved for sites with no advertising dependency (or those happy with the data limitations of Basic Mode).
| Tool | Auto Scan | Consent Log | Geo Targeting | Free Version | Consent Mode v2 Support | TFC v2.3 | Impact Has Used It | Best For |
|---|---|---|---|---|---|---|---|---|
| Complianz | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | All-in-one WP compliance |
| CookieYes | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | Simple, modern setup |
| Cookiebot | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | Multi-language global sites |
| Real Cookie Banner | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | Visual control & templates |
| Cookie Information | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ | Enterprise & documentation |
| Cookie Control by Civic | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | Accessibility-first sites |
| Osano | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | Legally supported compliance |
| Cookie Script | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | Flexibility & language support |
| OneTrust | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ | Large enterprises |
| WP AutoTerms | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | Basic cookie notice |
| Beautiful Cookie Banner | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | ✅ | Stylish, simple banner only |
Cookie compliance has always been important, but the regulatory and technical landscape has shifted significantly in recent years. A cookie banner is no longer a set-and-forget deployment, it’s something that needs monitoring, configuration, and periodic review.
The good news is that WordPress gives you a strong range of well-maintained options to work with. Choosing the right one comes down to your compliance requirements, advertising setup, site complexity, and design preferences.
Whichever tool you choose, make sure your Privacy Policy is kept up to date and includes clear information about your use of cookies and third-party services.
Need help setting up cookie compliance for your WordPress site? Speak to our team today. We have worked with a lot of these tools, and can help you select and implement the right one for your business.
If you’d like to learn more about our WordPress & WooCommerce Support & Maintenance plans, drop us an email or give James a call.
Our plans provide a holistic solution to your website’s performance, reliability and security, and are inclusive of premium tools and services.
Discover the key factors in a successful domain migration. Understand the risks before making this crucial change.
Stay informed about the latest developments in email tracking. Compliance in the EU and UK is more complex than ever for businesses.
This post is designed to help marketing teams and professionals without an SEO background, who have access to their company's Search Console account, and are daunted by the Page Indexing report.
