Consent Management

Data & Tracking

Also: Consent Management Platform · CMP · Cookie Consent

What it isSystems for collecting and managing user consent for data collection and tracking

Why it mattersLegal compliance (Privacy Act, GDPR for global users) and data integrity

Business impactConsent rates affect data completeness — poorly designed banners reduce trackable traffic by 20-40%

Quick definition

Consent management is the process and technology for collecting, recording and honouring user permission to collect and use their personal data for marketing, analytics and advertising purposes.

Where it shows up in the data

See Data & Tracking benchmarks →

Consent Management Platform (CMP)

Software that presents consent interfaces, collects user choices, stores consent records and signals those choices to tracking tools (via Google Consent Mode).

Google Consent Mode

A Google API that adjusts how Google tags behave based on user consent status, enabling some measurement even when full consent is not given through modelled conversions.

Opt-in vs opt-out

Opt-in requires explicit user action before tracking begins. Opt-out allows tracking by default and gives users a way to disable it. Different legal frameworks require different approaches.

Consent signals

Technical signals passed from the CMP to ad platforms, analytics and marketing tools to ensure only consented users are tracked and targeted.

What it actually means

Consent management covers the full chain from user interface (the cookie banner) to technical enforcement (actually stopping or adjusting tracking based on consent) to record keeping (storing proof that consent was collected correctly).

The interface is the most visible part but the least complex. What most businesses get wrong is the connection between the consent interface and their tracking tools. A consent banner that doesn't correctly signal to Google Tag Manager, GA4 and ad pixels is a display-only solution that creates false compliance confidence.

For Australian businesses, the Privacy Act 1988 and Australian Privacy Principles apply. Businesses with global users (including EU visitors) may also be subject to GDPR, which has stricter opt-in requirements.

A cookie banner that doesn't actually change what gets tracked isn't compliance. It's decoration.

How it shows up

Presence of a CMP, Google Consent Mode implementation, consent opt-in rate, whether declining consent actually stops relevant tracking, consent record storage, privacy policy aligned with actual data practices.

The Australian context

Australia's Privacy Act reforms (ongoing as of 2026) are moving toward stricter consent requirements for analytics and advertising cookies. Businesses collecting data on EU residents are already subject to GDPR. The safest approach is to implement consent correctly now and configure Google Consent Mode to preserve as much measurement capability as legally possible.

Where people get this wrong

Installing a CMP without connecting it to GTM or Consent ModeThe banner becomes a UI-only element. Tracking continues as if no consent was selected. This is both a compliance failure and provides false confidence in data accuracy.

Designing consent banners that obscure the reject optionDark patterns (making 'Accept' large and prominent, burying 'Reject') are increasingly regulated and reduce user trust. They also produce inflated consent rates that don't reflect genuine preference.

Not keeping consent recordsIf your consent practices are audited (or a user disputes how their data was used), you need proof of when and how consent was given. Most CMPs handle this automatically if configured correctly.

Common questions

Does an Australian business need a cookie banner?

Under Australian law, the Privacy Act requires transparency about data collection. Cookie banners are not legally mandated in the same way as under GDPR, but they are best practice for analytics and advertising cookies, especially if you have EU visitors. The practical risk of not having one is growing as privacy regulations tighten.

What is Google Consent Mode?

Google Consent Mode is an API that lets your CMP communicate consent status to Google tags (Analytics, Ads). When consent is not given, Google tags adjust their behaviour — they don't set cookies but can model conversion data to fill gaps. This preserves some measurement without violating consent.

What is a good consent opt-in rate?

60-80% on a well-designed, non-manipulative banner is achievable. Below 50% suggests your banner design is poor, your site loads slowly (users leave before deciding) or your banner text is alarming. Optimise consent UX the same way you'd optimise any conversion element.

Which consent management platforms are commonly used in Australia?

Usercentrics, Cookiebot, OneTrust, Axeptio and Complianz (WordPress) are common. Google has its own consent solution for simpler setups. Selection depends on your tech stack, visitor volume and how complex your data collection is.

Keep exploring

About New Rebellion

New Rebellion is a marketing intelligence consultancy. We build tools, score Australian businesses on how their marketing actually performs, and publish Debrief every day. This dictionary is part of how we work in the open.

How we think →