AdSense & Blogging

AdSense Privacy & Messaging: How to Set Up a GDPR Consent Message

Seeing a consent or "certified CMP" notice in AdSense? Here is who needs the European regulations message and how to set it up in about 15 minutes.

Genius GuruFounder, GeniusGuru 7 min read
Quick answer:
  • If your site gets visitors from Europe (EEA), the UK or Switzerland, Google requires a certified consent tool before it serves personalised ads to them.
  • The free option is the European regulations message inside AdSense. Find it under Privacy & messaging.
  • Setup takes about 15 minutes: select your sites, pick a language, choose the buttons, add your privacy policy URL and click Publish.
  • Visitors from India do not see this message. It only shows to visitors in the regions it covers.

You open your AdSense account and see a banner about consent, GDPR or a "certified CMP". It sounds like a legal problem, and you are not sure if it even applies to a site in India.

This guide explains what the AdSense consent message is, who needs it, and how to set it up step by step in AdSense Privacy & messaging. No coding is needed.

What is AdSense Privacy & messaging?

Privacy & messaging is a section in your AdSense account. It lets you show small pop-up messages to your visitors. The most important one is the European regulations message. It asks visitors from Europe whether they agree to cookies and personalised ads.

Google calls this its consent management platform, or CMP. A CMP is just a tool that asks for consent, saves the visitor's choice and passes that choice to the ad system.

Google's help page on how the Google CMP works says the message usually shows on a visitor's first visit. It does not show again until you change the message or consent needs to be collected again.

It depends on where your visitors come from, not where you live.

Google's page on consent management requirements says publishers must use a Google-certified CMP that works with the IAB Transparency and Consent Framework (TCF) to serve personalised ads in the EEA and UK from 16 January 2024, and in Switzerland from 31 July 2024.

Many Indian blogs get some visitors from Europe, even if it is a small share. Think of students abroad, or people searching for an English guide. Without a certified CMP, those visitors are not eligible for personalised ads. Google says they "may be eligible for non-personalized ads or limited ads".

Your situationDo you need the message?
All visitors from India onlyNot strictly, but it does no harm to set it up
Some visitors from EEA, UK or SwitzerlandYes, if you want personalised ads to serve to them
You already use another certified CMPNo, do not run two consent tools at once
You use AdSense for Search on your siteYes, read the separate Search Ads help page
Tip: To check your visitor countries, open Google Analytics 4, go to Reports and open the Demographic details report under User attributes, then look at Country. If you have not set it up yet, follow our guide to set up Google Analytics 4 on your blog.

Before you start: three quick checks

  1. AdSense code is on your site. Google says the message only works after the AdSense code is placed on your pages. If you have not added it yet, read how to add your website to AdSense.
  2. You have a privacy policy page. The setup asks for its URL. If you do not have one, our guide on a privacy policy for an AdSense website shows what to include.
  3. Your site is not using a second consent plugin. Two pop-ups confuse visitors and can send mixed signals. Pick one tool.

How to set up the AdSense European regulations message (step by step)

These steps follow Google's help page Create a European regulations message. Menu names can change a little over time, so if something looks different, check that page.

Step 1: Open Privacy & messaging

  1. Sign in to your AdSense account.
  2. In the left menu, click Privacy & messaging.
  3. On the European regulations card, click Create. If you made a message before, click Manage and then Create message.

Step 2: Choose your sites

Under sites, click Select sites, tick the sites you want, then click Confirm. If you run several blogs on one AdSense account, you can add all of them to one message.

Step 3: Set the languages

Pick a default language. Google uses it when it cannot tell the visitor's device language. You can also add Additional languages, such as German or French, if you get many visitors from those countries.

Google notes that "English (en)" and "English (en-GB)" count as different languages. Review the text for each one separately.

Step 4: Choose the user buttons

Under User choices you will see these options:

  • Do not consent: when ON, visitors see a one-click "Do not consent" button on the first screen. You can choose the countries where it shows.
  • Close (do not consent): optional. Adds a close icon. A visitor who closes the message is treated as not giving consent.
  • Optimize my consent message: optional. When on, Google may show an automatically optimised version of the message. Switch it off if you want full control.
Note: Do not try to hide or trick visitors into clicking "Consent". Privacy rules expect a fair and clear choice. A clean, honest message is the safe path.

Step 5: Name, design and privacy policy

  1. Type a Message name. Only you see it, so something like "Main blog EU message" is fine.
  2. Use Edit and format to match your site colours and font, if you like.
  3. Enter your privacy policy URL, for example https://yoursite.com/privacy-policy/.

Step 6: Publish

Click Publish. If you are not ready, click Save draft and come back later.

You are in India, so you will not see the European message on your own site. That is normal. Here is what you can do:

  • Go back to Privacy & messaging and confirm the message shows as published for your sites.
  • Give it some time. Changes in AdSense are not always instant.
  • Ask a friend or relative in Europe or the UK to open your site in a private window and send you a screenshot.
  • Check your pages still load normally on a phone and the message does not cover your menu forever.
ProblemLikely causeFix
Message never appears for EU visitorsAdSense code missing on some pagesAdd the AdSense code to every page template, including the header
Message never appears on webReferrer policy blocks the "Referrer" headerGoogle says a policy such as strict-origin-when-cross-origin works. Ask your host or developer to check it
Message missing on AMP pagesAMP is not supported for this messageUse normal pages, or a CMP that supports AMP
Two consent pop-ups showA cookie plugin is also activeKeep one certified tool and turn the other off
Message shows but site looks brokenTheme CSS clashUse Edit and format, then test on mobile again

Google CMP vs a third-party CMP: which should you use?

Google lets you use its own message or a third-party CMP from its certified list. For most small Indian blogs, the built-in option is enough.

PointGoogle's message in AdSenseThird-party certified CMP
CostIncluded in AdSenseVaries by provider
SetupInside your AdSense account, no codePlugin or script, plus settings
Best forSmall blogs and script-based sitesSites with several ad partners or special needs
ControlBasic design and buttonsOften more design and reporting options
Important: If you pick a third-party tool, make sure it is on Google's certified CMP list. A random cookie banner that is not certified does not meet the requirement.

Does this affect AdSense approval or earnings?

Setting up the message does not get your site approved by itself. Approval still depends on useful content, clear navigation and following AdSense policies. Our AdSense approval checklist covers those points.

What the message does is keep your European visitors eligible for personalised ads. If only a small share of your traffic is from Europe, the effect on your total earnings will also be small. If you get a lot of European traffic, it matters more.

Common mistakes to avoid

  • Entering a privacy policy URL that gives a 404 error.
  • Publishing the message for one site but forgetting your second site.
  • Running Google's message and a cookie plugin at the same time.
  • Writing your own wording that promises things your site does not do, such as "we never use cookies".
  • Forgetting to update your privacy policy when you add a new ad network.

Final word

The AdSense consent message sounds technical, but it is one form inside your account. If any of your visitors come from Europe, the UK or Switzerland, set it up once, keep your privacy policy page live, and check it again when you add new sites.

Next step: open Privacy & messaging today and publish your message. If you want a site that is built with the pages AdSense expects, take a look at our AdSense-ready website scripts.

Sources: Google AdSense Help, Google consent management requirements, Create a European regulations message and How the Google CMP works.

Frequently asked questions

Is the AdSense consent message free?

Yes. The European regulations message is built into the Privacy & messaging section of your AdSense account. Third-party consent tools may have their own costs.

Will visitors from India see the GDPR message?

No. The European regulations message is shown to visitors in the regions it covers, such as the EEA and the UK. Visitors from India do not see it.

What happens if I do not set up a certified CMP?

Google says traffic from the EEA, UK and Switzerland without a certified CMP is not eligible for personalised ads, though it may still get non-personalised or limited ads.

Can I use a WordPress cookie plugin instead?

Only if that tool is on Google's list of certified CMPs that work with the IAB TCF. A basic cookie banner that is not certified does not meet the requirement.

Tools mentioned in this post

Genius Guru

Founder of GeniusGuru. Teaches AdSense, Facebook monetization, YouTube growth and AI tools to learners across India, and builds the ready-made website scripts sold on the GeniusGuru marketplace.

More about GeniusGuru →