A cookie wall is a mechanism that blocks access to website content unless a visitor consents to the use of cookies. Cookie walls are generally considered non-compliant under GDPR because they prevent consent from being freely given, which is a core requirement of valid consent under European data protection law.
Cookie Wall
Key facts
- Definition: A mechanism that blocks site access until a visitor accepts cookies
- Legal status: Generally non-compliant under GDPR
- Key issue: Prevents consent from being freely given, a core GDPR requirement
- Regulatory position: EDPB Guidelines 05/2020 state that cookie walls do not constitute valid consent
What is a cookie wall?
A cookie wall is a mechanism that blocks access to a website's content unless a visitor consents to the use of cookies and tracking technologies.
Unlike a standard cookie consent banner, which allows visitors to browse regardless of their consent decision, a cookie wall makes access conditional on acceptance. There is no reject button, no granular preference centre, and no way to access the content without agreeing to every cookie the site sets.
That structure is what makes cookie walls legally problematic. GDPR requires that cookie consent be freely given. When access to content is the price of consent, it is not free.
Cookie wall vs cookie banner
Cookie wall | Cookie banner | |
|---|---|---|
Access to content | Blocked until cookies are accepted | Granted, regardless of choice |
The user can decline | No | Yes |
Consent freely given | No | Yes, if correctly implemented |
GDPR compliant | Generally no | Yes, if correctly built |
Are cookie walls legal under GDPR?
Generally no. The European Data Protection Board clarified in its Guidelines 05/2020 that conditioning access to a website on the acceptance of cookies does not constitute freely given consent under GDPR.
Several national data protection authorities have acted on this basis:
- Germany explicitly does not permit cookie walls
- Belgium considers cookie walls incompatible with freely given consent
- France permits them only where a genuine equivalent alternative exists for users who decline
- Italy assesses them on a case-by-case basis, permitting them only where equivalent content is accessible without consent
- The UK ICO has indicated that cookie walls raise serious consent validity concerns
What is the consent or pay model?
A variant of the cookie wall where visitors are offered a choice between accepting tracking cookies or paying a subscription fee to access content without being tracked.
The EDPB addressed this in Opinion 08/2024, stating that these models, as typically implemented by large online platforms, do not meet the standard for freely given consent. Personal data should not be treated as a commodity exchanged for access.
Compliant alternatives to a cookie wall
Organizations seeking to collect consent without restricting access have three main compliant options:
- A properly built cookie consent banner that gives visitors a genuine accept or reject choice without blocking access to content
- A genuine paywall that charges for content access without conditioning access on tracking consent
- A freemium model that provides some content freely, regardless of cookie choice
Cookie wall and consent management
Avoiding a cookie wall requires a consent management platform that gives users genuine control, presents accept and reject options with equal visual weight, and logs consent decisions with a full audit trail for regulatory purposes.
For more information, see our consent management solution.
For a full guide to cookie walls, GDPR compliance, and compliant alternatives, see our blog post: /cookie-walls-gdpr-compliant-alternatives
Related glossary terms
Commonly asked questions
A cookie wall is a mechanism that blocks access to website content unless a visitor consents to the use of cookies. Unlike a cookie banner, it gives users no meaningful alternative, they either accept all cookies or they cannot access the site.
Generally no. The EDPB's Guidelines 05/2020 state that conditioning access to content on cookie acceptance does not constitute freely given consent under GDPR. Several EU member states have issued enforcement actions on this basis.
A cookie banner requests consent but allows visitors to browse regardless of their decision. A cookie wall blocks access to content until consent is given. That single difference is what makes cookie walls non-compliant under GDPR.
It depends on context. The EDPB's Opinion 08/2024 states that large online platforms offering only a consent or pay choice generally do not meet GDPR's freely given consent standard. Smaller publishers in some jurisdictions may have more flexibility, but this is an evolving area.
The three main alternatives are a properly built cookie consent banner, a genuine paywall that does not condition access on tracking consent, and a freemium model that provides some content freely regardless of cookie choice.
Adam is the Head of Digital Marketing at Clym, where he leverages his diverse expertise in marketing to support businesses with their compliance needs and drive awareness about data privacy and web accessibility. As one of the company’s original team members, Adam has been instrumental in shaping its journey from the very beginning. When he’s not diving into marketing strategies, Adam can be found cheering on his favorite sports teams or enjoying fishing.
Find out more about Adam