Cookie consent categories present, but trackers aren't actually gated by them

A consent management platform (CMP) is the tool behind your cookie banner that sorts trackers into categories like 'necessary', 'analytics', and 'marketing' so visitors can choose which to allow. This check looks at whether trackers are wired up to respect those categories. On this site, a CMP with categories is present and higher-risk trackers are loading, but there's no recognised script-blocking code actually stopping those trackers from firing regardless of what the visitor chooses. The banner shows visitors a choice, but the scripts run either way, so the consent is cosmetic rather than functional. This is one of the most common and most-enforced consent misconfigurations under GDPR (General Data Protection Regulation) and Europe's ePrivacy rules, because it creates a gap between what the site promises visitors and what it actually does with their data. Your developer needs to connect each tracker script to the CMP's category system, most major CMPs support this through a built-in script-blocking or tag-manager integration, so a tracker only loads after the visitor consents to its category. This typically takes a few hours depending on how many trackers are involved, and should be verified by testing in a fresh, private browser session before and after clicking Accept.