Meten voor de toestemmingsvraag
Een tag vuurt voordat de toestemmingsvraag is beantwoord.
- Familie
- Toestemming
- Status
- actief
- Geldt voor
- web
Wat er gebeurt
On page load, requests go to a measurement or advertising party at a moment when the visitor has not been able to make a choice. There may be a banner or there may not be; either way something was measured before anything was asked. An identifier is usually set at the same time, making the visitor recognisable on a later visit.
Waarom het ertoe doet
Consent that arrives after the processing is not consent for that processing. Someone opening a page about an illness, a legal conflict or a benefit claim has already signalled that to a third party, and the option not to do so never existed.
Veelvoorkomende oorzaken
- tag hardcoded in the page rather than behind the consent gate
- consent tool blocks cookie placement but not script or container loading
- tag added through a dashboard by a team that does not know about the gate
Dit is het níet
If the tag fires but refusing changes nothing, that is Refusal without effect: this entry is about the moment, that one about the effect of the choice. Both can be present at once and they are separate faults, because an operator can fix one and leave the other.
Hoe je het vaststelt
Indicator
A request to a third-party host carrying an identifier parameter or setting an identifier cookie, timestamped before the consent event. Absent a consent event, the whole capture qualifies.
Methode
network-with-identifier
Kwaliteit van de detectie
95 van 100
De grenzen van deze bevinding
Wat dit patroon zou weerleggen
- The measurement host is a first-party CNAME to the target domain.met de hand te toetsende bevinding krijgt een ander patroonStill an exposure, but not third-party by host. Needs DNS resolution at capture time.
- The request carries no identifier and sets no cookie.machinaal te toetsende bevinding wordt zwakkerThere is traffic, but the inference about personal data is weaker.
- Consent was granted in an earlier session on the same profile.machinaal te toetsende bevinding vervalt
- The tag only fired because the capture clicked something.machinaal te toetsende bevinding vervalt
Wat dit patroon níet vaststelt
- harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
- severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
- unlawfulness; that is for a supervisory authority or a court
- intent; a fault is usually a build decision, not a plan
- absence: not finding it in one capture is not evidence that it is not there
Reproduceren
- manual
repro/DPE-2026-0001/MANUAL.mdmeasurement requests visible before touching the banner - script
repro/web/check.mjsthe run reports DPE-2026-0001 as present, with the detail behind it - bookmarklet
repro/bookmarklet/before-consent.bookmarklet.txt - script
repro/DPE-2026-0001/before-consent.mjsat least one request to a measurement host before interaction, plus an identifier cookie
Ook zichtbaar met openbare scanners
Juridisch kader
Bepalingen
Rechtspraak
Veelgehoorde tegenwerpingen
Analytics falls under the strictly-necessary exemption.
The exemption covers what is necessary for a service the user asked for. Audience measurement is necessary for the operator, not for the visitor. Where the analytics party also uses the data for its own purposes, the argument fails entirely.
The servers are in the EU.
That answers a different question. This fault is about the moment, not the destination. An entry can be present with the recipient squarely inside the EEA.
It was one oversight, since fixed.
Testable. Archived source shows how long the tag was there. An unbroken run of years is not an oversight, and it cannot be repaired retroactively.
Our consent tool handles this.
Measure it rather than assume it. A tool that blocks cookie placement may leave container loading untouched.
Geldt wanneer
to-processing
Aangetroffen in
De onderzoeken waarin dit patroon gemeten is.