Skip to main content
The EU Digital Markets Act (DMA) imposes stricter consent requirements on top of GDPR. Katla automatically enables DMA compliance when the regulation is set to 'gdpr' - no additional configuration needed.

​
What DMA requires

The DMA adds two key requirements beyond standard GDPR:
  1. Equal prominence - The “Reject” button must be as visually prominent as “Accept All”. Users should not be nudged toward accepting.
  2. Re-consent throttling - After a user rejects consent, you cannot re-ask for at least 1 year. Showing the consent banner again before that period constitutes a “dark pattern.”

​
Equal-prominence buttons

“Reject” and “Accept all” share one row of two equal columns in every layout, whatever the regulation setting says:
  • Same size, height, corner radius, padding and font weight
  • Both are filled buttons - neither is an outline or a text link
  • Neither is given more width than the other, in any language
Turning on DMA Compliant additionally paints “Reject” in your primary color, so the two choices differ in nothing but the word on them. The Equal buttons setting on the Banner page does the same thing on its own, for a site that wants the stricter look without the re-consent throttling below. When a visitor rejects consent:
  1. The rejection timestamp is stored in the _katla_consent cookie
  2. On subsequent visits within 1 year, only the settings button (gear icon) appears
  3. The full consent banner is not shown again until the 1-year period expires
  4. Visitors can still change their preferences via the settings button at any time
This prevents the “consent fatigue” pattern where users are repeatedly asked to accept cookies after rejecting them.