Home / Insights / Advertising in the EU: GDPR, VAT and Consent
Markets & complianceAdvertising in the EU: what actually changes
Running ads into the EU changes three things at once: what you are allowed to track, how the spend is taxed, and what has to be disclosed. None of it blocks a campaign, but each one changes how the campaign is set up.
Advertising into the EU changes three things at once: how you may track users, how the ad spend is taxed, and what has to be disclosed. GDPR governs consent and audience data, VAT on cross-border ad spend is normally reverse-charged to the advertiser rather than added by the seller, and transparency rules require ads to be identifiable as ads. None of this blocks a campaign, but each one changes how it is structured.
Consent comes before the pixel
In the EU, the lawful basis for most advertising cookies and tracking pixels is consent. The tag should not fire, and the data should not be collected, until the user has actively agreed. A banner that is dismissed by scrolling, or that offers an accept button with no real alternative, does not meet that standard.
This is an operational problem before it is a legal one. If the pixel only fires after consent, reported conversions will be lower than the platform believes, and campaigns will look worse than they are. The fix is to pass consent state to the platform rather than to count every click as measurable.
The workable setup is to map every tag on the site to a purpose, decide which of them depend on consent, and hold those back until a choice is made. Tags that are strictly necessary for the site to function are treated differently from tags that exist to build audiences or measure advertising.
Consent state, and what the platform does with it
The major platforms support passing consent signals from your banner into the advertising system. Where consent is withheld, the platform does not write identifiers, which means the user is not added to remarketing lists and is not counted in the same way.
The consequence is that EU measurement will never match the numbers from consenting users alone. Budgeting on raw platform conversion counts in the EU tends to reward channels where consent rates happen to be high rather than where the advertising actually works.
The reliable approach is either to model the difference explicitly or to use the platform conversion-modelling features that estimate withheld conversions, while accepting that these are estimates rather than counts.
Audience data and what you may upload
Uploading a customer list to build a custom audience is a processing activity, not a technical one. It needs a lawful basis, and in most EU contexts that means either consent or a documented legitimate interest with a working opt-out.
The platform terms add a second condition. Advertisers are required to hold the necessary rights to the data they upload and to have told those people that their data may be used for advertising. A list that was bought or collected without that notice cannot satisfy either requirement.
Practical controls: keep the source of every list on record, honour opt-outs across every system rather than only the email tool, and treat hashed audience matching as a processing step that still needs a basis.
VAT on cross-border ad spend
Advertising bought from a platform is a service. For business customers in the EU it is normally subject to the reverse charge: the platform does not add VAT, and the advertiser accounts for it on their own return, usually as both output and input tax, so the net cash effect is often nil.
The part that decides the treatment is the VAT identification number. Where a business customer provides a valid number, the reverse charge applies. Where it does not, the platform may charge local VAT on the invoice, which is only recoverable through the usual mechanism.
For businesses outside the EU buying advertising aimed at EU users, the position is different again. Place-of-supply rules follow the customer rather than the audience, so the reverse charge generally does not apply to them.
Invoicing, and what to keep on record
Invoices for ad spend are the evidence for both the VAT treatment and the cost. Keep them at the account level rather than the campaign level, because platform billing is normally consolidated by account or by billing period.
Where several entities buy through one account, the invoice will not match the entity that actually bears the cost. That is a reconciliation problem rather than a tax one, but it is worth designing out early by keeping one billing entity per legal entity wherever that is practical.
Retention periods differ by member state, so the safe rule is to keep advertising invoices for the longest period that applies to any market you sell into.
National differences that still matter
EU rules set a floor rather than a uniform standard. How actively consent rules are enforced, what is accepted as valid consent, and how quickly complaints are acted on all vary by member state.
Language duties differ too. Several markets require consumer-facing material, including some advertising, to be available in the national language, and a few restrict the use of foreign terms in commercial communication.
The practical consequence is that a single EU-wide compliance decision is not available. What works is a baseline that satisfies the strictest market you sell into, plus a country-level check before any market receives meaningful spend.
Frequently asked questions
Do I need consent to run ads in the EU?+
For most tracking and audience-building activity, yes. Consent is the usual lawful basis for advertising cookies and pixels, and the tag should not fire before it is given. Tags that are strictly necessary for the site to function are treated differently from tags used to build audiences or measure advertising.
Is VAT charged on advertising bought from Google or Meta?+
For EU business customers providing a valid VAT number, the reverse charge normally applies and the platform does not add VAT. Without a valid number the platform may charge local VAT, which is then recovered through the normal return.
Can I upload a customer list to build a custom audience?+
Only where you have a lawful basis and the right to use the data for advertising. Consent or a documented legitimate interest with an opt-out is normally required, and the platform terms require you to have told those people their data may be used this way.
Does GDPR apply to advertisers outside the EU?+
It can, where you offer goods or services to people in the EU or monitor their behaviour. Targeting EU users with advertising is generally enough to bring the processing within scope, regardless of where the business is established.
What is the reverse charge and what do I have to do?+
It means the buyer accounts for the VAT rather than the seller. In practice you report the VAT on your own return, usually as both output and input tax, so the net cash effect is often nil. The main action is to make sure your VAT number is on the account.
Where does a channel partner fit into EU advertising?+
The partner opens and funds the advertiser accounts and handles account-level work with the platforms, while the EU compliance decisions — consent, audience data, tax treatment — stay with the advertiser as the data controller. Our own European work is primarily channel-partner account opening, and does not extend to running or managing campaigns.
Need the accounts behind all this?
Sailward Media is an authorized channel partner for Google, Meta and TikTok advertising. We open, fund and support advertiser accounts for brands, agencies and performance teams worldwide.
No obligation · Written terms before anything is opened