GA4 collecting data before cookie consent
UK GDPR requires consent before analytics cookies are set. GA4 implemented with gtag.js fires on page load without Consent Mode v2, which means the measurement ID is logging sessions and events before any consent signal is received. The ICO's enforcement posture on non-compliant analytics is active. Consent Mode v2 must be configured so that GA4 sends only cookieless pings until a visitor accepts, and full measurement only begins after that signal is recorded.