Cookie Consent in Czechia Without Killing Your Measurement

The problem foreign brands don’t see coming

Cookie consent looks like a legal checkbox, so it gets handed to whoever installs the website and forgotten. Then, months later, the marketing team notices conversions look low and Google Ads can’t optimise. The cause is almost always the same: a consent setup that is either illegal (tags firing before consent) or self-defeating (a compliant banner with broken measurement behind it). In the Czech Republic, both failures are common and both are avoidable.

This is where compliance and performance meet. Get it right and you are legal and measuring; get it wrong and you are exposed on one side and blind on the other.

The Czech rule: opt-in since 2022

The Czech Republic switched from opt-out to opt-in for cookies on 1 January 2022, via an amendment to the Electronic Communications Act (Act No. 127/2005 Coll., § 89). Storing or reading non-essential information on a user’s device now requires the user’s prior, active consent.

Two authorities are relevant: the Czech Telecommunication Office (ČTÚ) oversees the cookie-storage rule under the Electronic Communications Act, and the Office for Personal Data Protection (ÚOOÚ) oversees GDPR — how the resulting personal data is processed. Practically, that means two obligations at once: don’t place non-essential cookies before consent, and process any data lawfully and transparently afterwards.

Consent Mode v2: required, but not a magic wand

Since March 2024, Google requires Consent Mode v2 for advertisers using Google services (Google Ads, GA4) with users in the EEA. Without it, remarketing and audience features are limited and measurement degrades. Consent Mode communicates the user’s consent state to Google tags: it is not the consent banner itself, and it does not make an unlawful pre-consent setup legal.

It works through four signals your consent platform must set correctly:

A consent platform (CMP) that records one general “yes/no” but fails to map it to these four signals fails silently: it looks compliant while measuring nothing.

Basic vs. Advanced: the choice that decides your data

Consent Mode runs in two modes, and the difference is exactly where measurement is won or lost.

Both are legal if implemented so that no prohibited cookie or processing happens before consent. The practical difference: Basic mode leaves users who decline consent as a black hole, while Advanced mode lets Google statistically model the conversions you can no longer directly observe.

How much data is really at stake

When analytics is fully blocked for non-consenting users, industry sources estimate European data losses of roughly 30–50%, an indicative range rather than a Czech legal figure, and highly dependent on your banner and audience. Advanced consent mode can recover part of that through modelling; vendor estimates of the uplift vary and are best treated as claims rather than guarantees. Modelling also has operational thresholds (Google’s guidance references a level of ad-click volume per domain before modelling activates), so small sites benefit less.

The gap between a broken setup and a correct one is large enough to change every decision you make from the data. If a third of your conversions are missing or mis-attributed, your “best” campaign might be your worst.

The mistakes that quietly break everything

• Tags firing before consent. GA4, Google Ads, Meta Pixel or heat-maps loading before the user agrees — illegal under the 2022 rule and the most common failure.
• No equally visible “Reject all.” A prominent “Accept” with rejection buried several clicks away is a consent-validity and fairness problem.
• Treating everything as “necessary.” Labelling analytics and advertising as essential to avoid blocking them does not make them essential.
• Consent recorded but not mapped. The CMP saves a choice but never sets ad_storage / analytics_storage correctly — compliant on paper, blind in practice.
• Basic mode while expecting modelling. Basic mode sends no denied-user signal, so there is nothing for Google to model. Many teams assume they’re getting recovery they never configured.
• No consent records or easy withdrawal. You must be able to show what was consented to and when, and let users withdraw as easily as they agreed.

How to set it up so you stay legal and keep measuring

• Use a proper consent management platform that blocks non-essential tags until consent and offers an equally visible Accept / Reject.
• Implement Consent Mode v2 in Advanced mode for most advertisers, so denied-user conversions can be modelled rather than lost.
• Verify the CMP correctly sets all four signals (ad_storage, analytics_storage, ad_user_data, ad_personalization) — test it, don’t assume it.
• Categorise tags honestly: only genuinely necessary technologies in “essential.”
• Localise the banner into Czech, and keep consent records plus a one-click withdrawal.
• Audit tag behaviour before you increase ad spend — confirm nothing loads pre-consent and conversions arrive post-consent.

Frequently asked questions

This article offers general information for marketers rather than legal advice. Confirm your specific setup with a qualified Czech data-protection advisor.

Sources

More from the Czech Market Playbook: all 12 guides · Related: First 90 Days, Ad Costs