If a website/app collects personal data, the Data Owner must inform users of this fact by way of a privacy policy. All that is required to trigger this obligation is the presence of a simple contact form, Google Analytics, a cookie or even a social widget; if you’re processing any kind of personal data, you definitely need one.

In short, a website needs a consent-management platform if any of the following activities are taking place:

Regardless of where an organization is based (in the EU or otherwise), its website must meet regulatory obligations when processing EU/EEA citizens’ data or the business will face financial penalties.

If your website installs any non-technical cookies, e.g. via script like Google Analytics or via a Facebook share button

If your website can be visited by European users