> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.pandectes.io/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Explicit & Implied Consent (Legacy Version)

|| This article applies to the **Legacy Banner** (v4) and explains where to find and configure the implied consent setting. If you are on the New Banner, please refer to the [Explicit & Implied Consent (New Version)](https://help.pandectes.io/en/article/explicit-implied-consent-new-version-s5q6cz/) article.

Users must be given a choice regarding how their data is tracked. This article explains the two main approaches to cookie consent, **implied** and **explicit,** and how they relate to privacy compliance.

### Introduction

Cookies are used by almost every website to store information about visitors. These small files, often encrypted, live in browser directories and help site owners run essential functions, improve user experience, and gather analytics.

Depending on their source, cookies can be:

* [First-party cookies](https://help.pandectes.io/en/article/whats-the-difference-between-first-party-and-third-party-cookies-rb4fy1/): Created and stored directly by the website you visit.
* [Third-party cookies](https://help.pandectes.io/en/article/whats-the-difference-between-first-party-and-third-party-cookies-rb4fy1/): Set by external services or domains (e.g., advertisers, analytics providers).

If your website uses cookies, you are required by privacy laws to have a **cookie policy** in place, alongside a general privacy policy.

Your [cookie policy](https://help.pandectes.io/en/article/cookie-policy-generator-13r4tts/) should:

* Explain the purpose of each cookie.
* State what data is collected and how it is used.
* Disclose cookie duration (how long they remain stored).
* Be kept up to date with evolving regulations like [GDPR](https://help.pandectes.io/en/article/what-is-gdpr-and-why-do-you-need-to-be-compliant-1mngh45/) or [CCPA](https://help.pandectes.io/en/article/what-is-the-ccpa-173qx1i/).

Most importantly, users must be able to decide whether or not their data should be collected. This is where cookie consent modes come into play.

### Cookie Consent Mode

There are different ways of collecting consent, each with varying levels of strictness. 

The two most common are:

* **Implied cookie consent**
* **Explicit cookie consent**

### Implied Cookie Consent Mode

In this mode, users don’t need to explicitly click a button to provide consent. Instead, consent is assumed when they continue browsing the site — for example, by clicking a link, scrolling, or navigating to another page.

Key characteristics:

* Consent is **assumed by user behavior**, not an explicit action.
* Often called **“the soft way”** of consent.
* Not recommended when using strict banner modes (e.g., Accept Only, Accept/Decline, or Preferences with strict settings) because any action counts as acceptance.

### Explicit Cookie Consent Mode

In this mode, consent is only recorded when the user explicitly interacts with the cookie banner. The banner remains visible until the user clicks an action button (e.g., Accept, Decline, or Preferences).

Key characteristics:

* Consent requires a **clear, affirmative action**.
* Default requirement under GDPR.
* Often called **“the hard way”** of consent.
* Provides stronger compliance and greater transparency.

### Comparison Table: Implied vs. Explicit Consent

| Aspect | Implied Consent | Explicit Consent |
| ---- |
| **Definition** | Consent is assumed if users continue browsing (scroll, click, navigate). | Consent is given only when users click a banner button. |
| **User Action Required** | None (behavior counts as consent). | Yes (explicit choice required). |
| **Compliance Level** | Weaker, may not meet strict GDPR standards. | Strong, GDPR default requirement. |
| **User Experience** | Seamless, less disruptive. | More interruptive but transparent. |
| **Risk** | Higher legal and compliance risk. | Lower risk, higher legal protection. |
| **Best For** | Regions with looser privacy laws, or low-risk websites. | GDPR-regulated regions and sites handling sensitive data. |

### Video tutorial

${youtube}[Explicit Vs implied consent: What are the differences and how to be compliant](tClbWKwCqRc)