Are cookie banners legally required? UK and EU rules
If your site sets non-essential cookies and has UK or EU visitors, then yes, you effectively need to obtain consent, which in practice means a banner. Here is the plain-English version of the rules, and the nuance that decides it.
What the law actually requires
In the UK (PECR, alongside the UK GDPR) and the EU (the ePrivacy rules and GDPR), you must get a user’s consent before setting any cookie that is not strictly necessary. Analytics and advertising cookies are not strictly necessary, so they need consent. Consent must be freely given, informed and as easy to refuse as to give.
When you do and don’t need one
- You need consent (a banner) if you use GA4, any ad pixel, or most embeds, and have UK or EU visitors.
- You may not need a consent banner if you genuinely set only strictly necessary cookies, though you should still have a cookie/privacy notice.
- It is about where your visitors are, not just where your business is, so most sites are covered.
Not sure if your banner is compliant?
We’ll check whether yours meets the bar and still measures what it should. Free 10-second scan.
Check my tracking freeWhat makes a banner actually compliant
Showing a banner is not enough on its own. To count, it must not set non-essential cookies before consent, it must offer a reject option as prominent as accept, it must let people change their mind, and critically it must actually control the tags so declining really stops them. Regulators have been clear that accept-only or pre-ticked banners are not valid consent.
The commercial angle most people miss
A compliant banner and good analytics are not a trade-off. Paired with Consent Mode, you honour every choice and still recover modelled data from those who decline, so getting this right protects you legally and keeps your numbers. Getting it wrong risks both a complaint and a big hole in your data.
Get a compliant banner that still measures
We set up consent that satisfies UK and EU rules and keeps your analytics working. The audit comes off any build.
See how it works & pricingRelated guides
Do you need a cookie banner? What should a banner say? Cookie banner examples All guidesDatahound are analytics and ad-tracking specialists. We fix broken GA4, Google Ads, Meta and server-side tracking. See pricing · All guides · Back to datahound.agency
Cookie banner law: common questions
Are cookie banners a legal requirement?
If you set non-essential cookies such as analytics or advertising and have UK or EU visitors, you must obtain consent, which in practice means a banner. Sites using only strictly necessary cookies may not need one but should still have a cookie notice.
Is an accept-only cookie banner legal?
No. UK and EU rules require a genuine choice, so a reject option must be as easy to use as accept. Accept-only banners, or ones that hide reject, are treated as invalid consent.
Do I need a cookie banner if I only use Google Analytics?
In the UK and EU, yes. GA4 sets non-essential analytics cookies, so you need consent before it runs, which means a banner wired to control the tag.