Service
Consent and measurement audit
A check that the analytics application records only what your consent banner, cookie policy, and Malaysian PDPA posture allow it to record.
A banner that offers a choice is not the same as an analytics application that honours that choice. We test accept, reject, and withdraw paths on the properties you name, then watch the network and the application’s debug views for tags that still fire.
The review covers consent-mode configuration where you use it, cookie lifetimes, first-party versus third-party collection, and whether offline or server-side streams bypass the same controls. We write findings in language your legal and marketing leads can both use.
This is an audit of measurement behaviour, not a substitute for legal advice. We document what the application does; your counsel decides what that means for PDPA and your published notices.