Waiting
The banner is visible or the CMP has not returned. Only strictly necessary scripts run. “Waiting” is not accept. Treating it as accept is how most Thai retail sites we audit leak identifiers.
A tag that fires before a yes is not “pending analytics.” It is collection.
This page is the studio’s plain account of the topic we teach. It is not a CMP comparison chart and it is not legal advice. It is the shape of the work.
What we mean by consent-based tracking
Consent-based tracking analytics treats a person’s choice as the gate on non-essential measurement. Essential cookies that keep a checkout from collapsing may load. Advertising pixels, extra device fingerprints, and “we might need this later” user properties wait. If the person rejects, those tags stay dark — including on thank-you pages, where many stacks quietly cheat.
The hard part is not the banner copy. The hard part is the map: which tags sit behind which purpose, which vendors receive a payload, how long it lives, and what the report will honestly miss.
Three states every container must know
Granted
Purposes the person actually ticked may load. Granular purposes beat a single “allow all.” If your CMP only offers a binary, your taxonomy still needs internal categories so you can tighten later.
Refused
Non-essential tags stay off for that visit and, where storage allows, for later visits until the person changes their mind. Server-side forwarding must honour the same refusal, or you have only moved the leak.
PDPA does not care that your media buyer is anxious.
Under Thailand’s Personal Data Protection Act, personal data processing needs a lawful basis. Consent is one basis — not the only one — but analytics and advertising tags almost always rely on it in practice. Legitimate interest arguments for cross-site advertising are a poor bet. Metric Routecore will not coach you to stretch them.
If you sell across borders, you still start with PDPA if you are established in Thailand, then add the extra duties. We cover that mapping in the PDPA journal piece and in the PDPA Analytics Clinic.
Where to learn the craft
If you want vocabulary and a solo taxonomy, start with Signal Reading. If you want a marked map for a live property, take Consent Measurement Studio. If you only need a teardown of one unlawful tag, write to the studio and ask for a clinic hour.