# [What is Google Tag Manager, and how does it work with the General Data Protection Regulation (GDPR) and cookie consent?](https://www.cookiebot.com/en/google-tag-manager/) **The General Data Protection Regulation (GDPR) and the ePrivacy Directive (ePR) affect how you as a website owner may use Google Tag Manager to track your visitors from the EU.** · [Free trial](https://admin.cookiebot.com/signup) · [Get started with Google Consent Mode](https://www.cookiebot.com/en/google-consent-mode/) · [Learn more about the GDPR and what it requires of your website](https://www.cookiebot.com/en/gdpr-cookies/) --- ## What is Google Tag Manager? Google Tag Manager is a tool that enables website owners to manage and deploy marketing tags on their website without needing to modify the code. These tags include Google Analytics, Google Ads, and other tracking codes that provide insights into a website’s performance. These insights help website owners update and optimize their website and its content based on real-life user interactions and performance statistics. Common uses of Google Tag Manager include: - tracking website page view - tracking button clicks - tracking external links/outbound clicks - tracking conversions, such as in Google Ads - tracking how a user scrolls and behaves on a page - collecting user data, such as geolocation, device type and even screen width. If this gets too technical, then think of it this way: If your website is a symphony hall and the tags are all the different musicians you’ve chosen to house, then Google Tag Manager is the conductor. The conductor chooses what instruments are to play and when they are to play, in what order and for what duration. ### How does Google Tag Manager work? Google Tag Manager works through ***tags*** and ***triggers***. ***Tags*** are pieces of code, such as HTML or JavaScript, which are deployed on your website for analytics or marketing purposes, or it could be a social media plugin as well. They are also known by names such as tracking pixel, web beacons, ultrasound beacons and many others depending on their functions. Collections of tags, such as “marketing”, are called ***tag containers***. ***Triggers*** are the conditions under which tags are allowed to fire. Google Tag Manager can control when a certain tag is fired. Imagine a user is browsing a clothing website and clicks on a product. You can set a trigger in Google Tag Manager to fire a tag when this specific click event occurs. This tag might then send information to an analytics tool like [Google Analytics](https://www.cookiebot.com/en/google-analytics-gdpr/), recording that the user showed interest in that particular product. This action-trigger relationship helps the website owner understand user behavior and preferences based on specific interactions on the website. These ***rules*** can be URL-based or event-based, such as when a user scrolls or clicks on some area of your website. In other words: - tags are what happens - triggers are when they happen Most third-party tags (tags from other websites, not the one the user is browsing) will set [third-party cookies](https://www.cookiebot.com/en/google-third-party-cookies/) that, according to the [General Data Protection Regulation (GDPR)](https://www.cookiebot.com/en/gdpr/), require the explicit prior consent of your users. ### Why is cookie consent important? The concept of [cookie consent](https://www.cookiebot.com/en/cookie-consent/) gives website visitors the power to choose whether they agree to let companies collect their data. It is a legal requirement under privacy laws like the GDPR. The significance of cookie consent is highlighted by the fact that many people prefer not to do business with companies that share their sensitive data without permission. With cookies being a common method for data collection, obtaining cookie consent has become a crucial aspect of managing an online business. ### Does Google Tag Manager require cookie consent? Google Tag Manager doesn't directly require cookie consent because it doesn’t set cookies — it's a tool used for adding and managing tracking tags on a website. However, some of the tags added through Google Tag Manager may use cookies to track how users interact with a website, which makes obtaining cookie consent necessary to meet GDPR guidelines. Combining Google Tag Manager with a Consent Management Platform (CMP) enables website owners to correctly manage user consent for cookies. --- ## Is Google Tag Manager GDPR compliant? The GDPR, which came into force in May 2018, has strict rules about what you can do on your website with cookies. The European Union (EU) law is binding in all 27 member states, and if you have visitors from the EU, you are obligated to abide by the rules, even if you and your website are located outside the EU. So, if you have *any* type of cookie or tracking technology on your website, the GDPR states that you must: - Obtain clear and unambiguous consent from its users, - Prior to any processing of personal data, - After specifying all types of cookies and other tracking technology present and operating on its pages, - In easy-to-understand ways that enable users to consent and to revoke consent on each specific category of cookies, - To then be able to safely and confidently document each user consent, - Consent must be renewed annually. However, some national data protection guidelines recommend more frequent renewal, e.g. 6 months. Check your local data protection guidelines for compliance. Google Tag Manager is a tool designed to manage and deploy tags on a website and doesn’t inherently violate the GDPR. However, its compliance with the GDPR depends on how it is used. The compliance aspect comes into play when considering the type of data these tags collect and how. Website owners are responsible for ensuring that the tags deployed through Google Tag Manager comply with the GDPR, which includes obtaining legally valid consent from users for data collection and processing activities. Google Tag Manager can be used with [Google Consent Mode](https://www.cookiebot.com/en/google-consent-mode/) to ensure that tags don’t fire unless a user has explicitly consented to having their data collected. Google Consent Mode, an open API developed by Google, enables websites to control if and when tags should fire, which depends on users' consent choices. ### Respecting consent status with Google Consent Mode in Google Tag Manager Google Consent Mode can be used for various Google services, including Google Analytics, Google Tag Manager, and Google Ads. It can also be used to signal consent state for third-party tags (for non-Google products and services) with additional configurations. The Consent Initialization trigger plays a significant role in Google Consent Mode. It ensures that all consent settings are implemented before any other triggers prompt tags to fire. Using Google Consent Mode and Google Tag Manager together can help website owners respect users’ consent preferences and privacy and stay compliant with data protection regulations like the GDPR that mandate prior consent to obtain data. --- ## How Cookiebot™️ can help you comply with cookie laws when using Google Tag Manager [Cookiebot CMP](https://www.cookiebot.com/) is a [cookie consent solution](https://www.cookiebot.com/en/cookie-consent-solution/) and consent management platform for your website that enables you to make sure that your domains’ use of cookies and tracking is GDPR compliant. 1. Scans your website for cookies 2. Creates a cookies policy 3. Enables customizable consent banners 4. Obtains and records legally valid user consent 5. Allows tags to fire based on user consent Cookiebot CMP automatically controls all cookies so that no user data is collected until your users give consent, as mandated by the GDPR. **Cookiebot CMP then tells Google Tag Manager what tags to run**. Only strictly necessary cookies are allowed to be set when a user arrives on a website, and consent banners that manage user consent **are not allowed to have pre-ticked checkboxes** on any other categories of cookies. ### How do Cookiebot CMP and Google Consent Mode work together? Cookiebot CMP integrates Google Tag Manager with Google Consent Mode using a Tag Manager template designed to work with the Consent API and easy to set up without heavy coding knowledge. Cookiebot CMP manages the consents of your users and communicates their consent state to the Google Consent Mode API that governs the behavior of all Google-services based on user consents. If a user doesn't give consent to statistics or marketing cookies, Google Consent Mode makes sure that you still get valuable insight into your website's performance while respecting end-user privacy. Google Consent Mode ensures aggregate and non-identifying data if users don't consent to cookies, including: - timestamps - user agents - referrers - other basic measurements for modeling Google Consent Mode also enables you to display contextual ads based on anonymous data instead of targeted ads based on personal data, if users don't give their consent to marketing cookies. --- ## How to implement Google Tag Manager with Cookiebot CMP To implement Google Tag Manager with Cookiebot CMP, you need to: 1. Ensure the Google Tag Manager script is the first script to load on your website. 2. Mark your Google Tag Manager script with: data-cookieconsent=”ignore” to ensure that Google Tag Manager will always be allowed to load. 3. Insert the Cookiebot script with automatic cookie blocking immediately after the Google Tag Manager script. 4. Create 3 triggers in Google Tag Manager, which are fired upon custom event *cookie_consent_[category] category = {preferences, statistics, marketing}* For more technical details, [check out our support page dedicated to Google Tag Manager and Cookiebot CMP.](https://support.cookiebot.com/hc/en-us/articles/360009192739-Google-Tag-Manager-and-Automatic-cookie-blocking/) --- ## Implications of the Digital Markets Act (DMA) on Google Tag Manager The [Digital Markets Act](https://www.cookiebot.com/en/european-digital-markets-act-explained/) (DMA) places strict emphasis on obtaining clear and affirmative user consent for data collection in line with the GDPR. All tags deployed through Google Tag Manager must comply with these consent standards, and businesses that use Google Tag Manager will need to adapt to the [DMA’s requirements](https://www.cookiebot.com/en/digital-markets-act-dma-checklist-what-you-need-to-know/) in how they manage tags that collect user data. This adaptation may involve modifications in tag setup and trigger mechanisms based on user consent. The approach to tag management will need to become more dynamic, with user consent directly influencing which tags are active at any given time, ensuring that they follow the DMA’s requirements. The DMA law applies to gatekeepers (including Alphabet, which owns Google and its products), who are liable for [DMA compliance](https://www.cookiebot.com/en/digital-markets-act-dma-checklist-what-you-need-to-know/). However, businesses that don’t collect consent as per the DMA’s requirements — which align with the consent requirements under the GDPR — risk losing access to gatekeepers’ products and services and face hefty penalties under the GDPR. ### Get started on compliant Google Tag Manager cookie consent today with Cookiebot CMP Start your 14-day free trial of all premium features [Free trial](https://admin.cookiebot.com/signup) --- ## Frequently asked questions What is Google Tag Manager (GTM)? Google Tag Manager (GTM) is a popular tool for controlling tags on websites. Google Tag Manager can be used to control everything from statistical scripts or marketing tags that collect data for analytics and advertising, like tracking website page views, button clicks and how users scroll and behave. Websites use Google Tag Manager to update and optimize their websites and its content based on tracking of user interactions. How does Google Tag Manager (GTM) work? Google Tag Manager works through tags and triggers. Tags are pieces of code that are embedded on a website by Google Tag Manager that set trackers such as tracking pixels, web beacons or ultrasound beacons, depending on their technology. Triggers are the conditions under which tags are activated, e.g. when a user clicks or scrolls. Almost all third-party tags will set cookies on users’ browsers and therefore require the consent of users before activation. What is the EU's GDPR? The General Data Protection Regulation (GDPR) is an EU data privacy law that, along with the ePrivacy Directive (also known as the “[cookie law](https://www.cookiebot.com/en/cookie-law/)”), governs the processing of personal data of individuals inside the EU. The GDPR requires websites to obtain the clear and affirmative consent from users before being allowed to activate cookies that process personal data, such as IP addresses, browser and search history. Is Google Tag Manager GDPR compliant? Google Tag Manager can be used to deploy analytics and marketing cookies on your website, which means that you will need the prior consent from users in order to lawfully use Google Tag Manager in the EU. Statistics and marketing cookies must be deactivated by default until a user has given their prior consent. Does Google Tag Manager collect personal information? Google Tag Manager doesn’t collect personal information itself, but it does enable third-party tags to do so. The GDPR requires any organization that collects personal data from EU residents to have transparent and comprehensive privacy and cookies policies in place that share information about what data is collected, for what purpose, how long it’s stored for, and who has access to it. If you use Google Tag Manager to control the tags on your website, you must have a privacy policy in place with a section on cookies (or a separate cookies policy) to communicate your data collection policies to users. How does Google Tag Manager impact search engine optimization (SEO)? Google Tag Manager helps SEO professionals gain more insights into the activities on a website by managing the tags that collect information on user actions such as scrolling, link clicks, form submissions, video views, and more. The gathered data can then be analyzed using Google Analytics, helping to understand user behavior and improve website engagement. Google Tag Manager keeps your tags and code snippets organized, which contributes to a better user experience and efficient running of your site — factors which are important for SEO. Do ad blockers block Google Tag Manager? Google Tag Manager may be affected by ad blockers, particularly if it's used to deploy advertising or tracking tags. The extent to which Google Tag Manager is blocked depends on the type of tags used, the specific criteria of the ad blocker, individual user settings, and ongoing updates to ad blocker algorithms. While Google Tag Manager is not inherently an advertising tool, its association with Google's advertising services can lead to its tags being blocked, potentially impacting website analytics and functionality. Even though this differs from ad blocker to ad blocker, website managers should consider this in their traffic analysis and site maintenance strategies. --- ## Resources *Used by: Brand A, Brand B, Brand C* [See our guide for deploying Cookiebot CMP in Google Tag Manager](https://support.cookiebot.com/hc/en-us/articles/360003793854-Google-Tag-Manager-deployment/) · [Cookiebot CMP tag in GTM Community Template Gallery](https://tagmanager.google.com/gallery/#/owners/cybotcorp/templates/gtm-templates-cookiebot-cmp/) · [Get started with Google Consent Mode](https://www.cookiebot.com/en/google-consent-mode/) · [Learn more about the GDPR and what it requires of your website](https://www.cookiebot.com/en/gdpr-cookies/) · [General help for Cookiebot CMP implementation](https://www.cookiebot.com/en/help/) --- ## Product [Cookiebot™ Consent Solution](https://www.cookiebot.com/en/cookie-consent-solution/) · [Usercentrics for Wix](https://www.cookiebot.com/en/cookiebot-for-wix-by-usercentrics-app/) · [WordPress Plugin](https://www.cookiebot.com/en/new-wp-cookie-plugin/) · [Pricing](https://www.cookiebot.com/en/pricing/) ## Regulations [DMA (EU)](https://www.cookiebot.com/en/digital-markets-act-dma/) · [GDPR (EU)](https://www.cookiebot.com/en/gdpr/) · [CCPA (California)](https://www.cookiebot.com/en/what-is-ccpa/) · [VCDPA (Virginia)](https://www.cookiebot.com/en/virginia-vcdpa/) · [LGPD (Brazil)](https://www.cookiebot.com/en/lgpd/) · [TCF v2.3 (IAB)](https://www.cookiebot.com/en/tcf/) · [Google Consent Mode](https://www.cookiebot.com/en/cookiebot-cmp-google-consent-mode/) · [Microsoft UET Consent Mode](https://www.cookiebot.com/en/microsoft-consent-mode-cmp/) ## Partners [Become an affiliate](https://www.cookiebot.com/en/affiliates/) · [Become a partner](https://www.cookiebot.com/en/resellers/) · [Find a partner](https://www.cookiebot.com/en/cookiebot-reseller/) ## Resources [Blog](https://www.cookiebot.com/en/blog/) · [Digital Markets Act Hub](https://www.cookiebot.com/en/digital-markets-act-dma-resources/) · [Google Consent Mode Hub](https://www.cookiebot.com/en/google-consent-mode-resources/) · [Google Consent Mode V2 Certification](https://courses.usercentrics.com/course/google-consent-mode-v2) · [Google Consent Audit Fixes](https://www.cookiebot.com/en/google-consent-audit-fixes/) · [Developer documentation](https://www.cookiebot.com/en/developer/) · [Cookiebot vs CookieYes](https://www.cookiebot.com/en/cookiebot-best-cookieyes-alternative/) · [Cookiebot vs OneTrust](https://www.cookiebot.com/en/onetrust-alternative/) · [Cookie Banner Cost Calculator](https://www.cookiebot.com/en/cookie-banner-pricing-calculator/) ## Company [About us](https://www.cookiebot.com/en/about/) · [Careers](https://usercentrics.com/career/) · [Support](https://support.cookiebot.com/hc/en-us/) --- [Privacy Policy](https://www.cookiebot.com/en/privacy-policy/) · [Terms of Service](https://www.cookiebot.com/en/terms-of-service/) · [Cookie Declaration](https://www.cookiebot.com/en/cookie-declaration/) · [Data Processing Agreement](https://www.cookiebot.com/en/data-processing-agreement/) ©2026 Cookiebot™ by [Usercentrics](https://usercentrics.com/)