--------------------------- Title: 5 Cookie Banner Examples: Best Practices for GDPR Compliance and Design URL: https://www.cookiebot.com/en/cookie-banner-examples/ --------------------------- # 5 Cookie Banner Examples: Best Practices for GDPR Compliance and Design ## At a Glance - A GDPR-compliant cookie banner gives "Accept" and "Reject" equal visual weight, with no extra clicks needed to decline. - GDPR treats silence, inactivity, and pre-ticked boxes as invalid consent, even if a banner technically includes a reject option. - A cookie banner has to block non-essential cookies before a visitor responds, not just disclose them after the fact. - Clear, plain-language cookie banner copy outperforms legal jargon because visitors are more likely to read it before deciding. Typically, brands judge a cookie banner on one thing: whether it gets visitors to click accept. But under the General Data Protection Regulation (GDPR), that's only half the requirement. Declining has to be just as easy as accepting. So a banner that buries the "Reject" button behind extra clicks doesn't meet compliance requirements, no matter how well it converts. However, getting this right takes more than simply adding a reject button. It requires looking at how a banner is written and how it’s presented, since GDPR treats both as part of the same privacy compliance question. ## What the GDPR Requires from a Cookie Banner Under the GDPR, consent is only valid if it is freely given, specific, informed, and unambiguous. For websites, this means a cookie banner must do more than simply notify visitors that cookies are being used. It must give visitors meaningful control over how their data is collected and processed. This means visitors should be able to reject non-essential cookies as easily as they can accept them, choose separately between different purposes such as analytics and advertising, and understand in clear language what each category of cookies is used for. Consent must also result from an active action by the user. Silence, inactivity, or pre-selected options do not meet [GDPR consent](/en/consent-management/) requirements. These principles form the basis of [GDPR cookie and consent requirements](/en/gdpr-cookies/) that apply to websites across the EU. Importantly, compliance is not determined by the appearance of a banner alone. A banner may look compliant while still failing to meet legal requirements. What matters is whether non-essential cookies remain blocked until a visitor has made an informed choice. ## 5 Cookie Banner Examples Reviewing a cookie banner involves assessing both its wording and its design. The wording determines whether visitors understand what they are being asked to consent to, while the layout and button design influence whether accepting and rejecting cookies are presented as equally accessible choices. Let’s have a look at five cookie consent banner examples. ### 1. A Large International Bank A Large International Bank presents "Accept" and "Reject" as equally prominent options, using the same size, color, and placement for both buttons. And a separate "Manage preferences" button provides access to more granular choices. This banner also explains the purposes of the cookies in use, including analytics, personalization, and third-party advertising cookies from major advertising and analytics providers. The main drawback is the amount of text shown before a visitor reaches the consent options. The explanation spans two full paragraphs, which may make it harder for visitors to quickly understand the information and make a choice. ### 2. A Restaurant Chain The restaurant chain takes a different approach by displaying its consent notice as a small panel in the corner of the page rather than as a full-width banner. The notice matches the site's conversational tone, and "Accept All," "Reject All," and "Customize" are given equal visual weight through consistent button styling and sizing. Because the panel is smaller and less prominent than a traditional banner, however, it can be easier to overlook. Visitors moving quickly through the page may not immediately notice that a consent choice is required. ### 3. A B2B Lead-Generation Platforms The platform’s banner provides a high level of detail. It specifies the number of third parties involved and separates cookies into functionality, experience, measurement, and marketing categories. It also links directly to the full cookie policy. The visual presentation of the buttons is less balanced. "Accept" appears as a solid, dark button, while "Reject" shares the same low-contrast styling as the secondary "Learn more and customize" option. This creates a visual hierarchy that may discourage visitors from rejecting cookies. ### 4. A Government Website The website uses a banner positioned above the page content rather than a pop-up overlay. This allows visitors to see both the notice and the page content at the same time. "Accept additional cookies" and "Reject additional cookies" are displayed as identical buttons, while a "View cookies" link provides access to further information. The banner itself, however, provides only limited detail about the cookies being used. While it refers to additional cookies and cookies set by other services, it gives relatively little information about their specific purposes beyond improving services and remembering settings. ### 5. An Airline The airline describes its cookies in broad terms, referring to basic website functionality and content improvements. Additional information is available through a "Settings" link, although this option sits separately from the primary consent buttons. The more significant issue is the visual weighting of those buttons. "Accept cookies" appears as a prominent, filled button, while "I do not agree" is displayed as plain text without a border or background. This creates an imbalance between the available choices and mirrors a pattern that regulators have repeatedly scrutinized. Taken together, these examples highlight a recurring pattern. Most banners provide at least some information about cookies, but differences in button design, visibility, and choice architecture often determine whether the experience aligns with GDPR requirements. The table below summarizes how each example performs across key compliance and design criteria. **Example****GDPR Signal****Design Clarity****Key Strength****Gap****Overall Assessment**Large International BankStrongMediumEqual-weight buttons, named purposesLong copy before the choiceSolid on substance, dense to readRestaurant ChainStrongMediumBrand voice, equal button stylingSmall and easy to missGood design, low visibilityB2B Lead-Gen PlatformPartialMediumSpecific, detailed purposesReject styled like a secondary linkInformative copy, weak button parityGovernment WebsiteStrongHighEqual-weight buttons, non-blocking layoutLimited detail on cookie purposesStrong overall, light on explanationAirlinePartialLowSettings link availableReject is plain text, vague purpose copyWeakest of the five on button parity ## Build a consent experience designed for compliance and trust Cookiebot CMP helps you create GDPR compliant banners that give balanced consent choices, block non-essential cookies until consent is given, and automatically keep consent records up to date. [Explore Cookiebot CMP](https://www.cookiebot.com/en/cookie-consent-solution/) ## Cookie Banner Dark Patterns to Avoid A dark pattern is a design choice that influences visitors toward accepting cookies or makes it unnecessarily difficult to refuse them. Regulators across Europe have increasingly focused on these practices, making it clear that consent choices must be presented fairly and without influence. Supervisory authorities such as France's Commission Nationale de l'Informatique et des Libertés (CNIL), the UK's Information Commissioner's Office (ICO), and data protection authorities across the EU have taken enforcement action against organizations whose cookie banners did not provide visitors with a balanced choice. And privacy group NOYB (None of Your Business) has gone further, filing [NOYB cookie banner complaints](/en/noyb-cookie-banners/) with data protection authorities across Europe. Some of the most common examples of dark patterns include: - **Hidden or de-emphasized reject options:** Accepting and rejecting cookies should be equally easy. Displaying a prominent "Accept" button while making the reject option less visible may not meet regulatory expectations. - **Pre-ticked boxes for non-essential cookies:** Under the GDPR, consent must result from a clear affirmative action. Pre-selected options do not constitute valid consent. - **"Consent by scrolling" or "continued use" mechanisms:** Continuing to browse a website or scrolling through a page does not qualify as an affirmative action under the GDPR. - **Cookie walls that prevent access to content:** Generally, restricting access to content, also known as a [cookie wall](/en/cookie-walls/), unless a visitor accepts cookies, may call into question whether consent was freely given. - **Misleading button labels or navigation paths:** Users should be able to reject cookies without navigating through multiple layers or interpreting unclear labels. Consent choices should be presented in a clear, transparent, and balanced way. When designing a cookie banner, the goal should be to enable visitors to make informed choices easily, regardless of whether they decide to accept or reject non-essential cookies. ## What Makes a High-Converting Cookie Banner (Without Breaking GDPR)? As visitors become more aware of online privacy, trust plays an increasingly important role in how they interact with cookie banners. As visitors become more aware of online privacy, trust plays an increasingly important role in how they interact with cookie banners. According to the [Usercentrics 2026 State of Digital Trust Report](https://usercentrics.com/resources/state-of-digital-trust-report-2026/), 48% of consumers click "Accept all" less often than they did three years ago. The Netherlands leads that decline at 57%, while Sweden and the US move slowest, at 42% each. Every market is shifting the same direction, just at different speeds. This shift highlights the importance of designing consent experiences that are clear, transparent, and easy to use. Cookie banners that rely on confusing language or make it difficult to reject cookies risk undermining user trust and may also create compliance concerns. Several design principles can help create a better consent experience: - **Use clear, plain-language copy:** Visitors should be able to understand what they are consenting to without needing legal or technical expertise. More detailed information can be provided in the cookie policy. - **Present consent choices equally:** Accept and Reject options should be displayed with equal prominence so that users can make a genuine choice. - **Keep the initial banner simple:** The first layer should communicate the essential information clearly, while more detailed settings and category-level choices can be made available through a preferences center. - **Design for mobile users:** As many visitors will interact with the banner on mobile devices, all consent options should remain visible and easy to access across screen sizes. - **Align the banner with the website's overall design**: Using consistent colors, fonts, and branding can help create a more seamless experience and reinforce trust. A high-performing cookie notice supports both privacy compliance and visitor trust by making consent choices clear, accessible, and easy to understand. ## Create a Cookie Banner That Balances Privacy Compliance and User Experience Privacy compliance and good user experience don’t have to be at odds. A cookie banner that clearly explains its cookie categories, gives visitors a clear choice, and avoids deceptive design practices is more likely to meet GDPR requirements while also supporting visitor trust. As a starting point, companies should review whether their “Accept” and “Reject” options are presented with equal prominence. Check whether cookie categories are described in clear language. Lastly, see if visitors can easily revisit and change their consent choices at any time. However, these checks are not one-off considerations. As websites evolve and tracking setups change, your cookie banners need to reflect this to remain both compliant and effective. ## Build a GDPR-compliant banner in minutes Cookiebot CMP helps organizations manage consent by automatically scanning for new trackers, blocking non-essential cookies until consent is given, and maintaining an auditable record of visitor choices. [Learn more](https://www.cookiebot.com/en/cookie-consent-solution/) --- ## Footer ### Product - [Cookiebot™ Consent Solution](https://www.cookiebot.com/en/cookie-consent-solution/) - [Usercentrics for Wix](https://www.cookiebot.com/en/cookiebot-for-wix-by-usercentrics-app/) - [Usercentrics Cookiebot WordPress Plugin](https://www.cookiebot.com/en/new-wp-cookie-plugin/) - [Cookie checker](https://www.cookiebot.com/en/cookie-checker/) - [Pricing](https://www.cookiebot.com/en/pricing/) ### Regulations - [DMA (EU)](https://www.cookiebot.com/en/digital-markets-act-dma/) - [GDPR (EU)](https://www.cookiebot.com/en/gdpr/) - [CCPA (California)](https://www.cookiebot.com/en/what-is-ccpa/) - [VCDPA (Virginia)](https://www.cookiebot.com/en/virginia-vcdpa/) - [LGPD (Brazil)](https://www.cookiebot.com/en/lgpd/) - [TCF v2.3 (IAB)](https://www.cookiebot.com/en/tcf/) - [Google Consent Mode (EU)](https://www.cookiebot.com/en/cookiebot-cmp-google-consent-mode/) - [Microsoft UET Consent Mode](https://www.cookiebot.com/en/microsoft-consent-mode-cmp/) ### Partners - [Become an affiliate](https://www.cookiebot.com/en/affiliates/) - [Affiliate Login](https://app.impact.com/login.user) - [Become a partner](https://www.cookiebot.com/en/resellers/) - [Find a partner](https://www.cookiebot.com/en/cookiebot-reseller/) ### Resources - [Blog](https://www.cookiebot.com/en/blog/) - [Digital Markets Act Hub](https://www.cookiebot.com/en/digital-markets-act-dma-resources/) - [Google Consent Mode Hub](https://www.cookiebot.com/en/google-consent-mode-resources/) - [Google Consent Mode V2 certification](https://courses.usercentrics.com/course/google-consent-mode-v2) - [Google Consent Audit Fixes](https://www.cookiebot.com/en/google-consent-audit-fixes/) - [Developer documentation](https://www.cookiebot.com/en/developer/) - [Cookiebot vs CookieYes](https://www.cookiebot.com/en/cookiebot-best-cookieyes-alternative/) - [Cookiebot vs OneTrust](https://www.cookiebot.com/en/onetrust-alternative/) - [Cookie Banner Cost Calculator](https://www.cookiebot.com/en/cookie-banner-pricing-calculator/) ### Company - [About us](https://www.cookiebot.com/en/about/) - [Careers](https://usercentrics.com/career/) - [Support](https://support.cookiebot.com/hc/en-us/) ©2026 Cookiebot. All rights reserved. Cookiebot is a trademark of Usercentrics A/S. Usercentrics A/S is registered in Denmark. Company reg. no.: 34624607. Do Not Sell or Share My Personal InformationData Subject Requests [Privacy Policy](https://www.cookiebot.com/en/privacy-policy/) · [Terms of Service](/en/terms-of-service/) · [Cookie Declaration](https://www.cookiebot.com/en/cookie-declaration/) · [Data Processing Agreement](https://www.cookiebot.com/en/data-processing-agreement/) · [Legal Notice](https://www.cookiebot.com/en/legal-notice/) · [Accessibility Statement](https://www.cookiebot.com/en/accessibility-statement-wcag-compliance/)