Other tracking from Google
Google Tag Manager and website tracking lawsuits
What Suitcast knows about Google Tag Manager
Medium risk
- Type
- Other tracking
- Complaints naming it, 12 months
- 59
Requests the scanner matches to it
- www.googletagmanager.com/gtm.js
- www.googletagmanager.com/ns.html
The short answer
Google Tag Manager is a tracking script from Google. Suitcast rates its risk under the California Invasion of Privacy Act, CIPA, as medium, because complaints describe scripts like it recording visitors before they consent. It is named in 59 verified complaints in the last 12 months. The fix is to load it only after a visitor accepts, or to remove it when it is not used.
Why complaints name it
Complaints name it because it fires those tags the moment a page opens, before any banner is answered.
The act allows $5,000 per violation, which is why firms look for scripts that run the moment a page opens.
The fix
How to stop Google Tag Manager firing before consent
Open the container, turn on consent mode in the container settings, and give each tag a consent requirement (analytics_storage for analytics tags, ad_storage for ad pixels).
Also delete tags for services you no longer use.
How the scan checks this
- Loads your pages like a first visit. A real browser, nothing clicked, nothing accepted.
- Checks every request before the banner is answered. A request to www.googletagmanager.com/gtm.js is matched to Google Tag Manager and recorded with the millisecond it fired.
- Clicks reject and watches again. When the banner has a reject button, the scan presses it; if Google Tag Manager keeps firing, the report says so.
Scanner rules and limits are on the methodology page.
Trend
Complaints naming Google Tag Manager, month by month
Website accessibility (ADA) Website tracking (CIPA)
November 2025 to October 2026, current month to dateIndustries
Industries sued over Google Tag Manager
By the defendant's industry
Verified filings, 12 monthsCourt records
Latest verified complaints naming Google Tag Manager
- TrackingCourt recordfor Woodley v. Google LLC (opens in a new tab)
Woodley v. Google LLC
N.D. California, filed by Gutride Safier LLP. Attributed to California
- TrackingCourt recordfor Eugenio v. Sprouts Farmers Market, Inc. (opens in a new tab)
Eugenio v. Sprouts Farmers Market, Inc.
N.D. California, filed by Potter Handy, LLP. Attributed to Arizona
- TrackingCourt recordfor Edward Lominchar v. TikTok USDS Joint Venture, LLC (opens in a new tab)
Edward Lominchar v. TikTok USDS Joint Venture, LLC
C.D. California. Attributed to California
- TrackingCourt recordfor Maurer v. Edward D. Jones & Co., L.P. (opens in a new tab)
Maurer v. Edward D. Jones & Co., L.P.
E.D. Missouri, filed by Schubert and Jonckheer LLP. Attributed to Missouri
- TrackingCourt recordfor M.C. v. American Addiction Centers, Inc. (opens in a new tab)
M.C. v. American Addiction Centers, Inc.
D. Nevada, filed by Semenza Rickard Law. Attributed to Tennessee
- TrackingCourt recordfor Smith v. Google, LLC (opens in a new tab)
Smith v. Google, LLC
W.D. Missouri, filed by Berkowitz Oliver LLP KCMO
- TrackingCourt recordfor Gilbert v. Brooklinen, Inc. (opens in a new tab)
Gilbert v. Brooklinen, Inc.
E.D. New York. Attributed to New York
- TrackingCourt recordfor Fedoroff v. Rocket Mortgage, LLC (opens in a new tab)
Fedoroff v. Rocket Mortgage, LLC
E.D. Michigan, filed by Goodwin Procter LLP. Attributed to Michigan
- TrackingCourt recordfor Frankie Mendoza v. U.S. News & World Report, L.P. (opens in a new tab)
Frankie Mendoza v. U.S. News & World Report, L.P.
C.D. California. Attributed to Washington
- TrackingCourt recordfor Katherine Gonzalez v. Workwise Solutions Inc. (opens in a new tab)
Katherine Gonzalez v. Workwise Solutions Inc.
C.D. California. Attributed to New York
- TrackingCourt recordfor Scruggs v. SeatGeek, Inc. (opens in a new tab)
Scruggs v. SeatGeek, Inc.
E.D. California, filed by Nathan & Associates, APC. Attributed to California
- TrackingCourt recordfor Dirksen v. Funko LLC (opens in a new tab)
Dirksen v. Funko LLC
W.D. Washington. Attributed to Washington
- TrackingCourt recordfor Dunn v. Robinhood Markets, Inc. (opens in a new tab)
Dunn v. Robinhood Markets, Inc.
N.D. California, filed by Milberg PLLC. Attributed to California
- TrackingCourt recordfor Giampaoli v. Google LLC (opens in a new tab)
Giampaoli v. Google LLC
N.D. California
- TrackingCourt recordfor Wheeler v. Wyze Labs Inc (opens in a new tab)
Wheeler v. Wyze Labs Inc
W.D. Washington, filed by Levi & Korsinsky LLP (Ny). Attributed to Washington
Same type
Other tracking scripts the scanner checks
Questions owners ask
- Is having Google Tag Manager on my site illegal?
- No. The complaints do not claim the script is illegal; they claim it recorded a visitor before the visitor consented, or kept recording after the visitor declined. Loading Google Tag Manager only after consent, or removing it when it is not used, is what removes the pattern the complaints describe.
- How do I know if Google Tag Manager fires before consent on my site?
- Run the free scan. It loads your pages without clicking anything and checks every request that leaves the browser against its tracker catalog, recording the millisecond each match fired. If Google Tag Manager appears, it fired before consent. When your banner has a reject button, the scan clicks it and reports whether the script kept firing.
- Where do the case counts on this page come from?
- From the complaint text of verified California Invasion of Privacy Act filings. When a complaint names this script, the case is linked to it. Complaints that are not yet available in the public record are not counted, so the number is a floor.
Keep going
- Every tracking script the scanner recognizesGrouped by type, with the risk and fix for each.
- Which scripts appear most in privacy lawsuitsWhat each records and how to gate it.
- How to make every Tag Manager tag wait for consentThe default state, the consent setting on each tag and the Consent Overview.
- I got a CIPA demand letter. What now?What the letter means and the first week.
- Website lawsuits in CaliforniaWhere most tracking suits are filed.
Does Google Tag Manager fire before consent on your site?
Suitcast identifies risk indicators. It is not legal advice and does not determine compliance.