The guideline
Once the banner has been answered, keep a persistent way back to the consent settings on every page: a footer link in plain words such as "Cookie settings", or a small icon that stays visible, in the same place on every page. Opening it should show the current choice and let the visitor withdraw consent (a Reject all or equivalent control) in no more actions than giving it took. Confirm the change on screen after saving, as the GOV.UK banner does with a message that settings can be changed at any time. Do not make visitors clear browser data or write to the operator to take consent back.
Common failures
- After the cookie banner is answered, there is no persistent control to change or withdraw consent, or withdrawing takes more steps than giving it did.
Where it applies
Where
Disciplines
Devices
Why it matters, how to fix it, and the research behind it
Rubric's full guide adds the reasoning, the fix and the sources for this check, and checks your client's pages against it and hundreds of others. Findings come back worst first.