Guides Tool check
Google Maps & GDPR: Load map only after consent
The Google Maps map on the contact page is standard - and one of the most common pre-consent leaks. What you need to consider.
Why the card is a risk
A Google Maps iFrame loads as soon as the page is loaded from Google – it transmits the IP address and sets cookies, including to the US.
This means that Google processes personal data before the visitor has given their consent. On contact and location pages, this happens millions of times without anyone noticing.
Do I need consent?
Yes – provided the map loads before consent is given. The map content may only be reloaded once consent has been actively given.
In addition, Google Maps must be included in the privacy policy, along with a statement regarding the transfer of data to Google.
How to embed maps in a legally compliant way
Two straightforward options: a consent gate (map only appears after clicking/giving consent) or a static preview image with a link to Maps.
BlueOcean Privacy automatically blocks the Maps embed until consent is given. Alternatively, for simply displaying an address, a screenshot plus a ‘Open in Google Maps’ link is often sufficient – with no tracking at all.
Check your pages
Not sure where you can top up your Consent card?
The free BlueOcean scan identifies Google Maps requests and other trackers that fire before consent is given – per page, in 5 minutes.
Let's take a quick look at your sites
In a 15-minute call you’ll see where your client sites stand — and how to secure them effortlessly.
FAQ
Can I integrate Google Maps on the website?
Yes, but only with the visitor’s consent (Consent Gate) and provided this is stated in the privacy policy. If the map loads immediately, this could result in a warning.
Is a cookie banner enough for the card?
Only if the card is actually loaded after you click "Accept". Otherwise, it fires too early, despite the banner.
Is there an alternative without tracking?
Yes: a static map with a link to Google Maps or OpenStreetMap maps that do not use cookies.