ConsentMark
Free Scan
Google Tag Manager logo
Tag ManagementHigh complexity

Google Tag Manager

by Google

All product names, logos, and trademarks are the property of their respective owners. Their inclusion here is for identification purposes only and does not imply endorsement by Obscurity Ltd.

Sets cookies
No
Sends PII
No
Cross-site tracking
No
Consent required
Not required

Overview

Tag management system for deploying and managing tracking tags without code changes. Operates as a JavaScript container loading tags, triggers, and variables based on configurable rules. Does not collect personal data itself, but orchestrates tags that do - making container governance critical. Supports web and server-side (sGTM) containers.

Detection capabilities

Signature count
1
Detection methods
network
Property types
pathname

Consent Mode v2

Consent Mode v2

Google Consent Mode v2 signal requirements for this tag.

analytics_storagenot required
ad_storagenot required
ad_user_datanot required
ad_personalizationnot required

Performance impact

Performance Impact

Script size
85 KB
Requests per page
1

Common mistakes

  • 1Granting publish access to users who don't understand consent - one misconfigured tag creates regulatory risk
  • 2Deploying tags without consent settings, so they fire regardless of CMP status
  • 3Never auditing the live published container - may contain tags added by others
  • 4No version history or change notes, making audit trail impossible
  • 5Allowing custom HTML tags that inject arbitrary JavaScript, bypassing built-in consent checks

Compliance considerations

GTM is a delivery mechanism, not a data collector. The container script may load without consent in its default state.

Tag governance: Every tag within the container must be gated behind appropriate consent categories. Consent Mode supports both built-in checks (Google tags) and custom signals (third-party tags).

Governance policy: Implement restricted publish access, mandatory consent configuration for new tags, regular container audits against an approved inventory, and documented change management.

Server-side GTM: Routes requests through a first-party endpoint, improving data governance - but does not eliminate consent requirements.

Related services

Adobe Launch

adobe-launch

Tag ManagementLow risk

2 detection signatures

Cloudflare Zaraz

cloudflare-zaraz

Tag ManagementLow risk

2 detection signatures

Commanders Act

commanders-act

Tag ManagementLow risk

2 detection signatures

Ensighten

ensighten

Tag ManagementLow risk

2 detection signatures

Scan your site for Google

Run a free Consentmark scan to see how Google is loading on your site, whether it respects consent, and where governance gaps exist across your wider tag estate.

Start a free scan