# CNIL Cookie Banner Compliance Assessment Template

## Organization: [Organization Name]
## Website: [URL]
## Assessment Date: [YYYY-MM-DD]

---

## Banner Design Assessment

### Layer 1 — Initial Banner

| Element | CNIL Requirement | Compliant | Notes |
|---------|-----------------|-----------|-------|
| Accept All button | Present and visible | [ ] Yes / [ ] No | |
| Reject All button | Present at same level as Accept | [ ] Yes / [ ] No | |
| Equal prominence | Same size, color weight, and position hierarchy | [ ] Yes / [ ] No | |
| Customise option | Available at same level | [ ] Yes / [ ] No | |
| Purpose description | Clear explanation of cookie uses | [ ] Yes / [ ] No | |
| No dark patterns | No manipulative language or design | [ ] Yes / [ ] No | |
| Cookie policy link | Link to full cookie policy | [ ] Yes / [ ] No | |

### Layer 2 — Preference Detail

| Element | CNIL Requirement | Compliant | Notes |
|---------|-----------------|-----------|-------|
| Per-category toggles | Individual category consent | [ ] Yes / [ ] No | |
| Toggles default OFF | Non-essential categories start disabled | [ ] Yes / [ ] No | |
| Third-party partners listed | Named vendors per category | [ ] Yes / [ ] No | |
| Confirm Choices button | Saves current toggle state | [ ] Yes / [ ] No | |
| Accept All still available | Present in Layer 2 | [ ] Yes / [ ] No | |
| Reject All still available | Present in Layer 2 | [ ] Yes / [ ] No | |

## Technical Assessment

| Requirement | CNIL Standard | Compliant | Evidence |
|-------------|--------------|-----------|----------|
| No pre-consent cookies | Non-essential blocked before interaction | [ ] Yes / [ ] No | |
| Synchronous banner load | Banner loads before tag scripts | [ ] Yes / [ ] No | |
| Server-side consent validation | Consent checked server-side | [ ] Yes / [ ] No | |
| Consent cookie duration | Maximum 6 months | [ ] Yes / [ ] No | |
| Cookie max lifetime | 13 months maximum | [ ] Yes / [ ] No | |
| Reconsent after 6 months | Banner re-appears | [ ] Yes / [ ] No | |
| Reconsent on policy change | New consent required | [ ] Yes / [ ] No | |

## Dark Pattern Assessment

| Dark Pattern | Absent | Present | Description |
|-------------|--------|---------|-------------|
| Asymmetric buttons | [ ] | [ ] | |
| Hidden reject | [ ] | [ ] | |
| Confusing toggles | [ ] | [ ] | |
| Guilt-tripping language | [ ] | [ ] | |
| Pre-selected purposes | [ ] | [ ] | |
| Repeated prompting after rejection | [ ] | [ ] | |

## Accessibility Assessment (WCAG 2.1 AA)

| Requirement | Compliant | Notes |
|-------------|-----------|-------|
| Keyboard navigable | [ ] Yes / [ ] No | |
| Screen reader compatible | [ ] Yes / [ ] No | |
| Color contrast 4.5:1 | [ ] Yes / [ ] No | |
| Focus trap within banner | [ ] Yes / [ ] No | |
| Minimum 14px font | [ ] Yes / [ ] No | |

---

## Overall Assessment

**Status**: [ ] COMPLIANT / [ ] NON-COMPLIANT

**Critical Issues**: [List any critical non-compliance items]

**Remediation Deadline**: [Date]

**Assessed by**: [Name] | **Approved by**: [DPO Name]