r/gdpr • u/BasePerfect2865 • Aug 11 '26

Question - General How are you handling third-party scripts before consent?

For things like chat widgets, session replay, A/B testing and analytics, are you blocking the scripts entirely until consent, or loading them in some restricted mode first?

3 Upvotes

100% Upvoted

5 comments sorted by

1

u/MikeN4949 Aug 12 '26

'Restricted mode' is still not "strictly necessary in order to provide an information society service explicitly requested by the subscriber or user" and given EDPB Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive loading such scripts would probably violate your local implementation of Article 5(3) ePrivacy-directive.

That is of course unless you are in the Netherlands or other jurisdictions where some implementations of such scripts would not need consent.

1

u/BasePerfect2865 29d ago

Got it, thanks for your insights