MediumChecked on every planEU

No easy way to change your mind

Does a website need a link to change cookie settings after accepting?

Short answer

In practice, yes. Taking back consent must be as easy as giving it (GDPR Art. 7(3)). Put a “Manage cookies” link or icon on every page, so visitors can change their mind.

29%of 168 European shops did this (48)
No. 1most common medium problem in the study

Why it matters

Withdrawing consent must be as easy as giving it. Regulators expect a “Cookie settings” link or a consent icon on every page, so people who clicked “Accept” in a hurry can say no later.

How to fix it

  1. Add a “Cookie settings” link to the footer of every page that reopens your consent tool.
  2. Or turn on your consent tool’s floating consent icon.
  3. Make sure it opens the same choices as the first banner, including “Reject all”.
Steps for OneTrust
  1. In your template, turn on the cookie settings button (the floating one).
  2. Or add a footer link with the OneTrust class (below).
OneTrust docs, checked October 2026
Steps for Cookiebot
  1. Open Configuration, then the Privacy tab.
  2. Turn on “Show privacy button”.
  3. Or add a footer link that calls Cookiebot (below).
Cookiebot docs, checked October 2026
Steps for Usercentrics
  1. Keep the privacy button on. By default it sits at the bottom left once the banner is closed.
  2. Do not hide it with page styles.
  3. You can also add a footer link (below).
Usercentrics docs, checked October 2026
Steps for Didomi
  1. Add a footer link that opens the preferences (below).
  2. Use it on every page, like “Cookie settings”.
Didomi docs, checked October 2026
Steps for CookieYes
  1. Open Content, then Revisit Consent Button.
  2. Turn on “Floating Button” and pick Left or Right.
CookieYes docs, checked October 2026

The law behind this rule

Real case, anonymised

“Reject All” on OneTrust, and four trackers kept going

A banner from a big consent tool doesn’t mean the tags listen to it.
Read the case