What is Google Consent Mode?
Google Consent Mode is a framework that tells Google tags, such as Google Analytics and Google Ads tags, what a visitor has agreed to, so the tags can change how they collect and use data. It works with a consent banner. Version 2 added signals for ad personalization and sending user data to Google. It manages consent signals; it does not make a healthcare website HIPAA compliant.
- Passes consent states to Google tags: analytics, ad storage, ad user data, ad personalization.
- Basic mode blocks tags until consent; advanced mode sends cookieless pings for modeling.
- Google requires it for some features with EEA and UK users; US use is driven by state privacy laws.
- Consent banners are not HIPAA authorizations.
- Every practice welcome — retainers from $499/mo, Goals-Driven engagements, Performance-Linked Payout Models available.
- Dallas, Texas LLC
- US client team · Central Time (CST)
- 25+ US healthcare clients
- BAA signed with every client
- HIPAA compliance training across client and delivery teams
- Contracts and invoices in USD
-
Primary Care · North Dallas, TXCase study →
-
MedSpa · North Dallas, TX
-
Skin Care · Beverly Hills, CA
-
Dental · Christiansburg, VACase study →
-
Pediatrics · Blacksburg, VACase study →
-
Pediatric Dentistry · Blacksburg, VACase study →
-
Dental · Roanoke, VACase study →
-
Functional Medicine · Telehealth · USACase study →
“They were able to get all my ideas and work with me over a period of three to four months and create this amazing website. It's super customized, very modern, and it incorporates all the elements that I had wanted — the patient portal, nice pictures, a very interactive website, patient reviews. I would highly recommend their company to anyone who wants to make an excellent website.”
How Consent Mode works
A website shows a consent banner, often through a consent management platform. When the visitor chooses, the banner sends consent states to Google tags. The main signals are analytics_storage and ad_storage, which control cookies, plus ad_user_data and ad_personalization, added in Consent Mode version 2 in late 2023. Google required v2 signals for advertisers using certain features with users in the European Economic Area from March 2024.
There are two implementations. In basic mode, Google tags do not load until the visitor consents. In advanced mode, tags load with consent denied by default and send limited cookieless signals, which Google uses for conversion modeling. Advanced mode recovers more measurement but still sends some data to Google.
In the US, there is no federal consent requirement of this kind, but several state privacy laws give consumers rights to opt out of targeted advertising, and some require honoring browser opt-out signals. Some states, such as Washington, have specific consumer health data laws requiring consent.
How it applies to practice marketing
- Respect state laws: if the practice has visitors in states with opt-out rights, configure consent and opt-out handling accordingly.
- Choose the mode deliberately: advanced mode still sends signals to Google, which matters on pages tied to patient care.
- Remember HIPAA separately: consent to cookies is not authorization to disclose PHI, so keep tracking off booking, intake and portal pages regardless of consent state.
- Test it: check that tags actually change behavior when consent is denied.
See the HIPAA-safe website tracking guide, the Virginia consumer data protection guide and the website checklist.
Common mistakes and limits
The most common misunderstanding is that Consent Mode, or any cookie banner, solves HIPAA. It does not. HIPAA authorization has specific content and signature requirements, and a click on a banner does not meet them. Practices still need to limit what tags collect on pages involving patient care.
Other mistakes include banners that look compliant but do not actually block tags, defaults set to granted, and forgetting non-Google tags, which Consent Mode does not control. Privacy laws differ by state and change often, so review the setup with your compliance or legal team and retest after site changes.
Related pages from the US team
HIPAA-safe website tracking
Consent is not enough; here is what is.
Virginia consumer data protection guide
A state privacy law example for practices.
Healthcare website design, USA
Websites built with privacy in mind.
US healthcare marketing glossary
Every term, defined in plain English.
Every practice welcome — Goals-Driven engagements from $499/mo
We benchmark your last 90 days, agree monthly goals with you, and track them live on Ichelon Agency OS with a report every Monday. Performance-Linked Payout Models are available. Our US leadership is based in Dallas, and strategy calls run in US business hours.
Common questions
What is Google Consent Mode?
It is a Google framework that passes a visitor's consent choices to Google tags, such as Analytics and Ads, so the tags adjust how they store cookies and use data. Version 2 added signals for sending user data to Google and for ad personalization.
Does Google Consent Mode make a healthcare website HIPAA compliant?
No. Consent Mode manages cookie and advertising consent signals. HIPAA authorization has its own requirements, and a banner click does not meet them. Practices still need to keep tracking away from pages where patients share health information.
Is Google Consent Mode required in the US?
Google requires it for certain features when advertising to users in the European Economic Area and UK. In the US it is not required by Google, but state privacy laws may require honoring opt-outs from targeted advertising, and Consent Mode can help implement them.
What is the difference between basic and advanced Consent Mode?
In basic mode, Google tags do not load until the visitor consents. In advanced mode, tags load with consent denied and send limited cookieless signals that Google uses for modeling. Advanced mode keeps more measurement but still sends some data to Google.
A note on this guide: it explains marketing practice, not legal advice. Rules on privacy, advertising and insurance change and vary by state, so confirm anything compliance-related with your own counsel.
Does your consent banner actually block anything?
Book a 30-minute call. We'll test your tags and consent setup and show what still fires.