Consent Mode v2 & GA4: A Practical UK Guide for SMEs
If you run a small or medium-sized business in the UK, you’ve probably felt the squeeze: tougher privacy rules, rising ad costs, and fewer cookies to rely on. The good news? You can still measure what matters and keep campaigns performing—without breaking trust. Google’s Consent Mode v2 (paired with Google Analytics 4, or GA4) helps you stay compliant while recovering valuable insight. Below is a guide written for SMEs, explaining what Consent Mode v2 is, what changed, and how to implement it quickly and safely.
What changed with Consent Mode v2?
Consent Mode isn’t new, but v2 adds two extra consent signals alongside the familiar ad_storage and analytics_storage:
ad_user_data– controls whether user data for ads measurement can be sent to Google (e.g., enhanced conversions).ad_personalization– controls whether personalisation (like remarketing) can be used.
In practical terms, this means your site needs to send four consent states to Google tags so they behave correctly depending on each visitor’s choices. If you’re using Google Ads or remarketing in the EEA/UK, v2 isn’t optional—it’s simply the new normal. Multiple industry and Google help sources confirmed March 2024 as the enforcement point for ad personalisation features in our region.
Do I need a Consent Management Platform (CMP)?
If you serve personalised ads to users in the EEA or UK, Google requires a Google-certified CMP that integrates with the IAB’s TCF framework. Many publishers and advertisers had to adopt a certified CMP to continue running personalised ads in Europe and the UK.
<data-start=”2137″ data-end=”2402″>
Bottom line: even if your company is based in the UK, if you have EEA/UK visitors and use Google Ads or Ad Manager with personalisation, you should use a Google-certified CMP and surface a clear, compliant consent banner.
Why bother? The upside for GA4 data and ad performance
When a visitor denies consent, GA4 and Google Ads still receive cookieless pings so that reporting doesn’t drop to zero. GA4 then uses behavioural and conversion modelling to estimate the “missing” bits, based on patterns from similar users who did consent. This helps you keep sight of trends, revenue and campaign effectiveness without tracking anyone who said “no”.
That doesn’t mean you’ll see every data point—you won’t. But it does mean you can make smarter decisions than relying on guesswork, while respecting users’ privacy choices.
Basic vs Advanced Consent Mode (which should I use?)
Basic: Loads no Google tags until consent is granted. Safest, but loses most insight when people say “no”.
Advanced: Loads tags in a limited, privacy-safe way before consent (no cookies), then updates behaviour when the user chooses. This supports modelling and typically gives you better reporting while remaining compliant. (You must still honour consent—no cookies without permission.)
For most UK SMEs, Advanced is the pragmatic choice: you maintain user trust and still get enough data to optimise.
The quick, practical setup (GTM + a certified CMP)
If you’re comfortable with Google Tag Manager (GTM), the following workflow is fast and robust. If not, hand it to your developer or ask us to implement it for you.
Choose a certified CMP
Pick a Google-certified CMP that supports TCF 2.2 and integrates neatly with GTM. Configure your banner text, categories and regional rules for the UK/EEA.Set default consent to “denied”
In GTM or viagtag, set default states to denied forad_storage,analytics_storage,ad_user_data, andad_personalization. This ensures nothing personal is stored until the user opts in.Update on user choice
On accept or granular choices, your CMP pushes the consent results to GTM/gtag. GTM updates the consent state and fires the appropriate tags (GA4, Google Ads, Floodlight, etc.) in line with those choices.Map CMP purposes to Google signals
Make sure your CMP’s categories line up withad_storage(ads cookies),analytics_storage(analytics cookies), and the two new v2 signals (ad_user_data,ad_personalization). This mapping is critical for remarketing and enhanced conversion measurement.Validate the signals
Use the Tag Assistant and your browser’s Network tab to confirm that requests include the consent parameters (look for the consent string and Google’s consent metadata). Some tools expose thegcdparameter, which encodes the four signals—helpful for debugging.Test edge cases
Accept all
Reject all
Granular mixes (e.g., analytics allowed, ads denied)
Check GA4 real-time and GTM preview to ensure correct behaviour each time.
How this looks for a typical West Yorkshire SME
Imagine a Leeds retailer with online checkout and a Bradford service business capturing leads. With Advanced Consent Mode v2:
Visitors who accept analytics only: GA4 measures visits and on-site actions; Ads tags remain limited; no personalisation.
Visitors who accept analytics + ads storage but deny personalisation: you’ll retain conversion measurement but skip remarketing.
Visitors who reject everything: GA4 sends cookieless pings; behavioural and conversion modelling fills some gaps so you can still attribute trends and make budget decisions.
The experience is transparent for users and dependable for your team.
Common pitfalls to avoid
Loading tags before consent when you intended Basic mode. Double-check your default consent states.
Not implementing the v2 signals (
ad_user_data,ad_personalization). Without them, you risk losing remarketing and enhanced conversions in the UK/EEA.Forgetting your CMP requirement for personalised ads. If you target UK/EEA users with personalisation, use a Google-certified CMP or expect degraded ad features.
Skipping QA: Always test accept/reject/granular paths in GTM preview and verify network requests.
Frequently asked questions
Will I still see “all” my GA4 data?
No. With Advanced mode you’ll see more than Basic, but it’s still privacy-centred. GA4 uses modelling to estimate behaviour and conversions for non-consenting users. Think of it as a realistic picture rather than a perfect photo.
Is this GDPR-compliant out of the box?
Consent Mode v2 helps you honour consent and minimise data collection, but compliance depends on how you configure your CMP, your policies, and your overall data practices. When in doubt, get legal advice.
Do I need developers?
A lot can be handled in GTM with a certified CMP. If you’re short on time, an experienced team can deploy and test it end-to-end within a sensible timeframe.
Action checklist
Pick a Google-certified CMP and publish a clear UK/EEA banner.
In GTM, set default consent to denied for all four v2 signals.
Map CMP purposes →
ad_storage,analytics_storage,ad_user_data,ad_personalization.Enable Advanced mode unless your policy requires Basic.
Verify requests in Tag Assistant; confirm the
gcdparameter and consent string are present.Review GA4’s Behavioural/Conversion Modelling impact in reports; set expectations internally.
Need a hand?
We implement Consent Mode v2, GA4 and Google Tag Manager for UK SMEs every week—from local shops in Leeds and Bradford to national e-commerce brands. If you want compliant measurement, clearer reporting and better-performing ads (without annoying your customers), we’ll get you live, test thoroughly, and leave you with a simple playbook your team can follow.



