Introduction
Fix a missing cookie policy scanner finding. Add a discoverable cookie policy with a cookie table that matches your live site behavior.
What it means
No cookie policy or cookie declaration was detected. The ePrivacy Directive and GDPR transparency requirements expect websites using non-essential cookies to provide a dedicated cookie disclosure.
A missing cookie policy means users cannot find detailed information about the cookies your site sets — their names, purposes, lifetimes, and third-party providers.
Why it matters
Regulators and compliance scanners treat this issue as a technical indicator that consent processes may not match stated policies. It is one of the most common findings in automated GDPR audits across all website categories.
Fixing this issue typically produces the largest single improvement in compliance scores, because it addresses the most heavily weighted scanning criteria.
Common mistakes
- Assuming the banner UI alone is sufficient — scanner findings are based on network and script behavior, not visual inspection.
- Testing only with an already-consented browser session, which hides the pre-consent behavior.
- Fixing the homepage but not campaign landing pages, subdomains, or localized variants.
Practical checklist
- Create a cookie policy page with a cookie table listing name, provider, purpose, category, and duration for each cookie.
- Link the cookie policy from your site footer and consent banner.
- Align the cookie list with the cookies actually detected by the scanner — update the declaration to match reality.
- Set up a process to update the cookie policy when marketing adds new tags.
- Run a compliance scan after fixes to confirm the issue is resolved.
- Document the fix date and rescan result for audit evidence.
How GDPRChecker helps
GDPRChecker flags missing cookie policy link as a medium-severity finding in scan reports. While less urgent than pre-consent tracking, this issue should be addressed to improve transparency and reduce compliance surface.
After implementing the fix, rescan your site with GDPRChecker to confirm the finding is cleared and your compliance score improves.