The End of the Contextual Ads Carve-Out: Why the EU Digital Omnibus Mandates Consent for Basic Ad Measurement

The EU Digital Omnibus proposal does not end contextual advertising. The key change is that contextual targeting and ad measurement must be treated separately. Contextual ads may be served without consent, whereas ad measurement and reporting involve cookies, identifiers, device access, or third-party tracking and thus require consent.

Advertisers used contextual advertising to comply with privacy laws. Instead of tracking users across websites, they served ads based on the content of a page or the topic of an article. For publishers and advertisers, this led to a useful assumption: if ads are not personalized, there is no need to seek consent when tracking ad performance.

The EU Digital Omnibus proposal challenges that assumption. It does not ban contextual advertising, nor does it say that every low-risk measurement activity requires consent. However, it says that even though contextual ads themselves don't track users across sites, basic Ad measurement will require explicit consent.

Measuring contextual ads would be treated as standard behavioral tracking and, thus, would need consent.

The European Commission says users should keep control of who can access their devices. There would be an exemption for limited purposes such as statistics and aggregated audience measurement.

The Digital Omnibus proposal is still a proposal, and there could be consent exemptions in some areas, including First-party audience measurement.

However, for digital advertisers, the real issue is measurement. Even basic ad reporting needs to track users through cookies, tracking pixels, SDKs, server logs, or device-level access. If that measurement is not exempted from the requirement to obtain consent, consent may still be required.

Read more about what the EU digital omnibus changes for contextual advertising and how consent rules would affect ad measurement and reporting.

What the EU Digital Omnibus Changes for Contextual Advertising

The Digital Omnibus proposal is part of the European Commission’s larger attempt to simplify EU digital rules. It includes changes to data, AI, cybersecurity, and cookie-related rules. For cookies and user tracking on websites, the Commission’s goal is to keep users in control of who can access their devices.

Digital Omnibus consent rules will affect contextual advertising. Now, contextual ads are treated as non-tracking activity by default. In practice, even when using contextual ads, advertisers may still collect information from the users’ devices to measure ad efficiency.

For example, a publisher may show an ad based on page content. In addition to showing an ad, it may also measure impressions, frequency, clicks, fraud signals, or conversions. To measure these activities, publishers could use cookies or other website trackers, often without user consent.

Even if contextual advertising does not collect Personal Information, it still accesses information on the user’s device.

The EU Digital Omnibus proposal aims to change this ad measurement practice. If approved, the EU Digital Omnibus will set consent obligations for contextual targeting as well.

Thus, digital advertisers will need to display a Cookie Banner, explaining what user information they collect and for what reasons, and obtaining user consent to load cookies on users’ devices.

Why Basic Ad Measurement May Still Need Consent Under EU Rules

For measuring basic ads, advertisers need access to users’ devices. They place cookies and other website trackers on users’ devices. Thus, even if ads are non-personalized, advertisers collect user information and may still need consent.

Basic ad measurements sound non-intrusive and non-personal- they do not collect Personal Information from users. However, publishers need to know whether ads are loaded, and and advertisers need to know the performance of their campaigns. Thus, basic ad measurements almost always need to access or store information on users’ devices.

Publishers and advertisers use website tracking tools, such as cookies, tracking pixels, local or session storage, SDKs, or server logs for basic ad measurement. Under the eprivacy Directive and the GDPR, businesses need to obtain consent for placing trackers on users’ devices. This means basic ad measurement may still need consent when it uses these tracking technologies.

Ad measurement consent may also be required when measurement involves third-party ad platforms, cross-site identifiers, user-level profiles, attribution across websites, or tools used by multiple clients and services.

Contextual advertising EU rules will have some exemptions, but the proposed exemption for audience measurement is narrow. Consent-free audience measurements would be limited to aggregated information, carried out by the service provider for its own purposes, provided it doesn’t share this information with third parties. In other cases, collecting other types of user data will require basic ad measurement consent.

Many common advertising and measurement tools are third-party technologies that work across multiple sites, platforms, or customers. GDPR ad measurement rules do not provide exemptions from the regulation, so businesses would need to obtain consent to use third-party ad measurement tools.

In conclusion, “contextual advertising” does not automatically mean “consent-free advertising”. If the EU Digital Omnibus proposal is adopted, measurement of contextual ads requires consent.

Not sure if your website uses cookies or other trackers for ad delivery or measurement? Scan your website for free and see what tracking tools, including Third-Party Cookies, your website uses:

The Limits of the Contextual Ads Carve-Out for Publishers and Advertisers

The Digital Omnibus proposal distinguishes between two types of ad tech measurement: low-risk, aggregated, internal audience measurement may be performed without user consent, while ad tech measurements that follows users and compares activity across services require user consent.

Publishers use contextual advertising to deliver ads without depending on behavioral tracking or Third-Party Cookies. However, publishers should not treat contextual advertising as a full compliance shortcut.

The real issue is not delivery, but the measurement of contextual ads. It could include impression tracking, click tracking, frequency capping, viewability measurement, conversion attribution, and Ad fraud detection. You need contextual ad consent for these measurements.

Some of these activities may be performed without user-level identifiers. But others need device access, cookies, local storage, or third-party tracking infrastructure.

The Digital Omnibus proposal separates these two measurement cases. Publishers could continue using aggregated, internal audience measurement without user consent, but ad tech measurement that involves user device tracking will need consent.

The same is valid for advertisers. They may continue buying contextual insights for non-behavioral tracking, but EU Cookie Consent rules require consent for third-party measurement tags, conversion pixels, or cross-site attribution used in contextual advertising.

How Consent Rules Affect Ad Measurement, Reporting, and Campaign Attribution

Consent rules create a consent gap that distorts advertising data. These rules may affect reported impressions, fill-rate analysis, viewability data, and revenue reporting. Advertisers will notice the Digital Omnibus advertising impact soon: it can affect campaign attribution, return-on-ad calculations, audience reporting, and optimization signals.

The biggest issue is attribution. Simple aggregated reporting may be easier to perform without invasive tracking. But attribution often tries to connect an ad exposure or click to a later action, such as a purchase, signup, or form submission. That usually requires user identifiers, event matching, or tracking across contexts. The Digital Omnibus proposal will disrupt attribution for non-consented users.

There could be these possible consequences of the proposed consent rules:

Impact of consent rules on Ad measurement

Data loss
When visitors decline analytics and marketing cookies and don’t give consent for ad tracking, websites lose the ability to deploy tracking pixels and collect direct, user-level event data. This diminishes observable metrics like page views, clicks, and conversions.
Conversion modeling
To bridge this gap, major platforms use privacy-compliant tools to estimate outcomes. For instance, frameworks like Google Consent Mode v2 use conversion modeling to analyze aggregate traffic and estimate user behavior based on other users’ behavior. This allows advertisers to recover up to 70% of lost conversion data.

Impact of consent rules on reporting

Fragmented dashboards
Without consent for advertising measurement, reporting becomes more probabilistic. Advertisers often see lower sessions and conversions in analytics tools than their sales records show.
Audience decrease
With new consent rules in place, non-consented users will be automatically excluded from custom audience lists, shrinking the scale of retargeting campaigns.
Platform discrepancies
Even now, paid media platforms (e.g., Google Ads, Meta Ads) and independent analytics tools (e.g., GA4) often report differing targeting results for targeted advertisements. This happens because each system applies its own methods to compensate for the consent gap used in aggregated audience measurement. Platform discrepancies are also expected for contextual targeting, when the rules of the Digital Omnibus proposal take place.

Preparing Your CMP and Ad Tech Stack for the Digital Omnibus Consent Shift

Publishers, advertisers, and ad tech vendors should know what tracking tools they run, when they run, what data they collect, which vendors receive the data, and whether it fits an exemption. If they do not have an exemption, their CMP should collect, store, and pass consent before activating those technologies.

Read these guidelines to comply with the Digital Omnibus consent rules:

Start with Ad tech stack mapping
Most sites have more tracking tools than people think. Even if companies know which ad platforms they use, many of them do not know exactly which cookies, pixels, tags, SDKs, or storage methods run on their websites. CookieScript Cookie Scanner could help with that, as it performs regular cookie scanning and categorization.
Separate contextual ad serving from measurement and attribution
While contextual ad delivery could still be allowed without consent under the Digital Omnibus proposal, you will need user consent for measurement and attribution.
Identify which tools are First-party and which tools involve third-party vendors
If a third-party ad platform collects data across multiple services or clients, you will need user consent to place cookies on their devices. For first-party, internal tools, focused on aggregated internal use, you could rely on the proposed audience measurement exemption.
Be clear and transparent
Provide a Privacy Policy that clearly explains your contextual targeting practices. Contextual targeting may reduce consent requirements, but ad measurement still needs to be assessed separately.
Check automatic consent signals, such as IAB TCF, GPC, and Google Consent Mode configuration
If ad partners depend on consent signals, you need to pass those signals consistently. A contextual campaign can fail compliance checks if the measurement vendors receive unclear or missing consent signals. Thus, make sure you receive and pass correctly IAB Transparency and Consent Framework (IAB TCF), Global Privacy Control (GPC), and Google Consent Mode v2 signals.
Respect regional consent rules
Different jurisdictions have different requirements for consent. Implement geo-targeting to determine users’ locations, deliver the right Cookie Banner, and obtain valid consent.
Implement a proper CMP
Select a Consent Management Platform (CMP) to obtain valid user consent for contextual targeting and comply with new consent rules. A proper CMP should detect and categorize cookies and other web trackers, automatically block third-party cookies before consent, record user consent for proof of compliance, and detect automatic consent signals.
It’s also important to use a Google-certified CMP, since non-certified CMPs do not pass consent signals to Google consistently. Tus, Google doesn’t allow using its advertising and analytics products with websites that use a non-certified CMP.

Use a CookieScript CMP, one of the best CMPs, valued by users, to manage consent for for advertising measurement.

CookieScript CMP offers the following cookie compliance solution that will help to comply with the Digital Omnibus consent rules:

CookieScript offers affordable pricing. You can get a fully compliant consent management tool for as little as €8 per month per domain for basic features, or €19 per month per domain for full compliance.

CookieScript also offers a 14-day free trial.

Frequently Asked Questions

How could consent rules affect ad measurement, reporting, and campaign attribution?

Consent rules create a consent gap that distorts advertising data. These rules may affect reported impressions, fill-rate analysis, viewability data, and revenue reporting. Digital Omnibus advertising impact will be the biggest on advertisers: it can affect campaign attribution, return-on-ad calculations, audience reporting, and optimization signals.

Does contextual advertising require consent under EU rules?

Contextual advertising does not always require consent just because an ad is shown. If the ad is based only on page content and does not use cookies or device-level tracking, consent is not required. However, if the ad setup includes measurement tags, pixels, cookies, or third-party identifiers, consent may be required by the new Digital Omnibus consent rules. Use CookieScript CMP to obtain and store valid consent.

Why can basic ad measurements require consent?

Basic ad measurements can require consent when they store or access information on a user’s device. This can include cookies, local storage, pixels, SDKs, or identifiers used to count impressions, clicks, conversions, or campaign performance. If you just show a contextual ad, you don’t need consent. However, ad measurement and reporting use user-tracking tools that require consent.

What is the contextual ads carve-out?

The contextual ads carve-out refers to the idea that ads based on page content, rather than user behavior, may be treated as less intrusive and do not require consent from users. But this carve-out has limits and does not automatically cover ad measurement, attribution, or third-party tracking, which need consent for ad tracking.

How should publishers prepare for Digital Omnibus consent changes?

Publishers should audit their ad tech stack and separate contextual targeting from ad measurement. They need to check which vendors use cookies, pixels, SDKs, or identifiers before consent. It is important to use a CMP like CookieScript that detects and categorizes cookies, automatically blocks third-party cookies before consent, records user consent, and detects automatic consent signals.

Guides

Menu