Consent management

Data protection glossary · 1 minute read

Consent management refers to obtaining, documenting and managing consent, typically through a consent management platform on websites and in apps.

On the first visit, a consent management platform (CMP) displays a consent banner, blocks cookies and services that require consent until consent is given and stores the choice made in a verifiable way.

It covers both consent to access the terminal equipment under Section 25 TDDDG and consent under data protection law in accordance with the GDPR.

Requirements for a compliant banner

  • no pre-ticked boxes
  • rejecting as easy as accepting
  • clear information about purposes and providers
  • withdrawal possible at any time and as easy as giving consent
  • no data transfer before consent

In its judgment of 1 October 2019 (C-673/17, Planet49), the CJEU clarified that a pre-ticked checkbox does not constitute valid consent.

Section 25 TDDDG
Consent for storing and accessing information on terminal equipment.
Art. 4(11) and Art. 7 GDPR
Definition of and conditions for consent.
Section 26 TDDDG
Recognised consent management services.

Last updated: September 2026

Questions about this topic?

Dr. Georg Schröder, LL.M. · Managing Director, Lawyer, Data Protection Officer

Book a consultation

In 20 minutes you will know where you stand.

We clarify where action is needed on data protection, AI and information security - and what you should do next.