Interactive guide · applicable from 15 June 2026

CMP + Google Analytics 4: web publisher liability (LSSI and GDPR)

From June 2026, the Google Signals configuration no longer governs the data flow to Google Ads. Real control shifts to Consent Mode via GA4, specifically the ad_storage, ad_user_data and ad_personalization signals. Correctly configuring the CMP becomes critical to comply with art. 22.2 LSSI and the GDPR.

Adjust the CMP and GA4 options and observe in real time what data flows, how they are legally classified, and what sanction risk the web publisher or owner assumes.

To keep this simulator from becoming too complex, the transparency and information obligations in the CMP and Cookie Policy — which must also be addressed — are not covered.

Scenarios:

CMP 2 variables

Does the CMP comply with and respect the user's decision (or non-decision)?

The Data Protection Authorities do not allow GA to be treated as a "technical cookie" exempt from consent.

Does the CMP actually relay the user's decision to the Consent Mode signals, or is it merely cosmetic?

GA4 Configuration · Default Consent Mode 3 variables

Initial values sent with the tag before any user interaction.

Advertising cookies and identifiers (historical pillar).

Use of user data for advertising measurement and personalisation.

Personalised advertising and remarketing.

Legal Diagnosis (overall assessment)

Analyses the implementation as a whole, considering all possible moments of interaction.

LSSI art. 22.2 Prior consent to terminal access
GDPR Legal basis and validity of consent