Cookie consent and privacy compliance for an SME website in Dublin in 2026

The verdict in three sentences

Data-protection authorities actively check cookie banners: a banner that does not let users refuse as easily as accept is non-compliant. An SME gets compliant in 3 weeks with a CMP (consent management platform) at 15-40 EUR/month, an 800 EUR setup and a processing register. Total compliance cost stays under 1,500 EUR in year one, against a fine risk reaching 2 % of turnover.

The cost of cookie compliance

Compliance relies on a properly configured CMP and minimal documentation. Here are the 2026 orders of magnitude for an SME brochure site.

Year one: about 1,200 to 1,500 EUR all-in for a standard brochure site, then 180 to 480 EUR/year for the CMP. A marginal cost against the risk.

Obligations checklist and penalties

Regulators favour a formal notice before a fine, but the penalty lands on repeat or serious breaches. Here are the obligations and their criticality.

Cookie fines have targeted both large groups and SMEs. For a small business, the scale runs from a few thousand euros to 2 % of annual turnover, not counting the cost of emergency remediation.

Mini case study

Julian, owner of a B2B trading SME in Dublin (18 staff, 2.4 M EUR turnover), runs Google Analytics and a Meta pixel set before any consent, with an "accept all" banner and no refuse button. A client flags the problem.

Compliance: Axeptio CMP at 25 EUR/month, setup and documentation at 1,100 EUR, i.e. 1,400 EUR in year one. Against that, a hypothetical fine of 1 % of turnover would be 24,000 EUR. The ratio is over 17 to 1 in favour of immediate compliance. Bonus: the measured consent rate stays at 62 %, preserving most of his analytics while being compliant.

FAQ

Is an "accept all" banner with no refuse button illegal?

Yes. Regulators require refusing to be as simple as accepting, with a visible "Reject all" button at the first level. An asymmetric banner is the most-penalized non-conformance.

Is Google Analytics allowed in 2026?

Yes under conditions: prior consent, Consent Mode v2 configuration and ideally settings limiting transfers. European alternatives (Matomo, Plausible) avoid the debate on out-of-EU transfers.

Which CMP should an SME pick?

Axeptio and Cookiebot suit small businesses (15-40 EUR/month), Didomi targets larger sites. The key is that the CMP actually blocks trackers before consent, not just displays a banner.

Is a processing register mandatory for an SME?

Yes, GDPR requires it of any organization processing personal data, with relief for those under 250 staff. A simple table documenting purposes, data and retention periods is often enough.

How long to become compliant?

Three weeks is enough: one for the tracker audit, one for CMP setup and documentation, one for testing and training. It is a short project with a high peace-of-mind return.

Let's scope your project. Send us your site URL and your list of marketing tools: we audit your trackers and deliver full cookie compliance in 3 weeks for under 1,500 EUR. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.