Cookie Compliance Requires Data Audits, Not Just Consent Banners

Cookie compliance requires organisations to understand and manage their data practices, rather than relying solely on consent banners, according to a blog post by Dan Moriarty.

Writing for Electric Citizen, Moriarty states that many websites include tracking technologies such as analytics tools, embedded media, and third-party integrations without a clear inventory of what data is being collected. He argues that compliance begins with auditing these systems and distinguishing between functional cookies and those used for tracking or advertising.

The article also outlines implementation options after auditing, including open-source tools such as Klaro for Drupal and paid consent management platforms. Moriarty concludes that consent tools are only effective when supported by clear data governance practices and informed decision-making.