CookieBanner.co.uk · Independent Analysis
Pay for Privacy?
How major UK news websites are changing the meaning of “Accept Cookies”
You arrive to read one article. Before you can continue, a new price is placed in front of you: accept personalised advertising and tracking, or pay for another route. Is this simply the modern cost of free journalism—or is meaningful privacy becoming a premium product?
Review date
12 July 2026
Topic
Consent or Pay
Focus
UK News Publishers
Assessment
Regulatory Questions
Important: This investigation does not conclude that any named organisation has breached UK GDPR, PECR or any other law. It examines publicly described consent models and the regulatory questions they raise. Technical behaviour can change and requires direct testing.
Read free
Continue with personalised advertising and relevant tracking technologies.
Pay for another route
Access without personalised advertising. Advertising may still remain, depending on the publisher.
The central distinction
Advertising is not the same as tracking
A website can fund content through advertising. The more difficult privacy question begins when access is linked to consent for technologies used to recognise a device, observe behaviour, infer interests or support personalised advertising.
Advertising
The advert may relate to the page
A reader views an article about home renovation and sees an advert for paint. The placement may relate to the content or context of the page rather than a profile built around that reader.
Seeing advertising does not, by itself, tell us that personalised tracking is taking place.
Personalised advertising
The advert may be selected for the user or device
- Device or browser identifiers
- Cookies and similar technologies
- Browsing activity
- Inferred interests
- Previous interactions
- Advertising profiles
The privacy exchange may be considerably broader than simply agreeing to view an advert.
ICO framework
Four questions that can determine whether the choice is genuinely free
The ICO’s consent-or-pay framework focuses on power imbalance, the appropriateness of the fee, equivalence and privacy by design. The model must be assessed in the round.
01
Power imbalance
Can the reader realistically walk away? Does the position change for an existing subscriber or a service with barriers to switching?
02
The fee
Is the price appropriate and objectively assessed, or could the cost itself exert substantial pressure to consent?
03
Equivalent service
Do the consent and pay options provide broadly the same core product or service and an equivalent level of quality?
04
Fair design
Are both routes explained clearly, or does one emphasise a benefit while the other feels complex, costly or difficult?
Two buttons do not automatically create two equal choices.
Publisher comparison
The privacy choices described by major UK publishers
| Publisher | Publicly described model | Area for examination |
|---|---|---|
| The Independent | Use data for advertising and ad-tracking purposes or pay for an ad-free experience. | Does “Read free” explain the data exchange as clearly as the financial benefit? |
| The Sun | A model openly described as “Pay to Reject”. | How are subscribers, logged-in users and logged-out visitors treated? |
| The Times | Personalised advertising access or a separate non-personalised advertising route. | Is it clear that paying may still mean seeing advertising? |
| The Guardian | Personalised advertising consent or Ad-Lite for eligible readers. | What exact optional purposes are included in the live consent choice? |
| Mirror / Reach | Personalised advertising and a separate privacy-related service described in publisher terms. | How do privacy preferences behave across a large publishing network? |
Inclusion is not a finding of breach. This table identifies questions for fair, evidence-led examination. Interfaces, prices and technical implementations can change.
Publisher review 01
The Independent: when “Read free” is part of the privacy choice
The Independent explains that much of its content remains available without a conventional content subscription and says readers are asked either to allow their data to be used for advertising and ad-tracking purposes or to pay for an ad-free experience described as otherwise equivalent.
The question
Does “Read free” explain the data exchange as clearly as it explains the financial benefit?
What should be tested?
- First-layer wording and visual prominence
- How personalised advertising and ad tracking are explained
- Whether unrelated optional purposes are separated
- Technologies operating before a decision
- Withdrawal and preference controls
- How the fee and service equivalence are assessed
CookieBanner.co.uk view: The key issue is not whether free journalism can be supported by advertising. It is whether an ordinary reader understands the data-related side of the exchange at the moment consent is requested.
Publisher review 02 · Public model: Pay to Reject
The Sun: an unusually direct name for the privacy payment
The Sun publicly describes its model as “Pay to Reject”. Its help information says the arrangement operates independently from an ordinary Sun subscription and contains specific information about logged-in and logged-out states.
The question
What happens when somebody who has paid to reject personalised advertising is logged out?
What should be tested?
- Existing subscriber treatment
- Logged-in behaviour
- Logged-out behaviour
- Cross-device recognition
- Recurring payment clarity
- Consent withdrawal and cancellation
CookieBanner.co.uk view: “Pay to Reject” is direct wording. The more important technical question is whether the service consistently respects the relevant privacy state and obtains a valid decision whenever that state changes.
Publisher review 03
The Times: paying may still mean seeing advertising
The Times’ published terms describe a choice involving personalised advertising technologies or a paid non-personalised advertising access route. The privacy payment is not necessarily an ad-free subscription.
The question
Would the average reader understand that paying for non-personalised advertising access may still mean seeing adverts?
What should be tested?
- Paid option wording
- Clarity that advertising may remain
- Existing subscriber treatment
- Fee justification
- Core-service equivalence
- Cancellation and preference controls
CookieBanner.co.uk view: The words “paid”, “private” and “ad-free” can imply very different things. The exact outcome of paying should be unmistakable before the reader makes a decision.
Publisher review 04
The Guardian: what exactly sits behind the live consent choice?
The Guardian launched Ad-Lite as a route for readers who do not wish to consent to personalised advertising. Its public information explains that Ad-Lite readers can still see non-personalised advertising and that third-party hosted content can create additional advertising considerations.
The question
What exact optional purposes are included when the reader makes the live consent decision?
What should be tested?
- Personalised advertising
- Analytics choices
- Functionality technologies
- Content personalisation
- Third-party embeds
- Ad-Lite exceptions and privacy settings
CookieBanner.co.uk view: Consent for personalised advertising should be assessed against the precise purposes included in the live choice. A technical review should distinguish the advertising choice from unrelated optional technologies.
Publisher source: Guardian Ad-Lite announcement · Ad-Lite terms
Publisher review 05
Mirror and Reach: one privacy question across a publishing network
For a large publishing group, the most interesting audit question may not sit on one page or one title. It may concern how consent, identifiers and privacy preferences behave as a reader moves through a network of national and regional websites.
The question
What happens to a privacy choice when one publisher operates a network of major national and regional websites?
What should be tested?
- Cross-domain consent behaviour
- Shared consent records or identifiers
- Preference recognition between titles
- Central withdrawal routes
- Advertising partner consistency
- Banner wording across brands
CookieBanner.co.uk view: A shared implementation may improve consistency, but it can also increase the scale of a technical error. Group-wide conclusions should only follow group-wide testing.
A cookie banner screenshot cannot prove compliance
A banner shows what a website says. A proper review compares the technical state before a decision, after consent, after refusal and after withdrawal.
Evidence
What a defensible publisher audit should record
Consent-or-pay analysis should not stop at the wording of a publisher’s help page. The consent interface and technical implementation should be tested in a clean browser state and across each important user journey.
Where a publisher operates subscriptions or account-based privacy products, logged-in and logged-out states can be particularly important. Multi-title groups may also require cross-domain testing.
Evidence checklist
- Cookies before interaction
- Local and session storage
- Network requests
- Advertising requests and identifiers
- Consent strings and category states
- Behaviour after refusal
- Behaviour after withdrawal
- Choice persistence
- Logged-in and logged-out states
- Cross-domain behaviour
Alternative models
Could publishers simply show adverts without tracking readers?
Option one
Contextual or lower-risk advertising
Advertising selected according to page content or another privacy-preserving context, subject to the technologies actually used.
Option two
Personalised advertising with consent
The user actively agrees to the relevant personalised advertising technologies and receives clear information and ongoing controls.
Option three
Paid access
A paid route without personalised advertising, or a wider premium product. The exact service and advertising outcome must be clearly described.
Different models can produce different commercial outcomes. The regulatory question is whether the model actually used supports lawful processing and meaningful user control.
Is privacy becoming a premium product?
People with disposable income can pay.
People who do not want another subscription may consent.
If price materially influences a privacy decision, when does a commercial choice become pressure?
Publishers argue that personalised advertising helps fund journalism and that users are not purchasing a legal right to privacy. Critics question whether financial pressure can make a consent decision less genuinely free. The ICO’s framework exists because both the economics and the privacy consequences matter.
For readers
Before you click “Accept”, ask five questions
1. What am I actually accepting?
Advertising, personalised advertising, analytics, profiling—or several purposes together?
2. What does paying remove?
All adverts, personalised adverts only, or selected tracking technologies?
3. Can I control other categories?
Can analytics, functionality and other optional purposes be managed separately?
4. Can I change my mind?
Look for a clear route to revisit and withdraw a decision.
5. Where does my choice apply?
One browser, one account, every device—or a network of websites?
For website operators
Using consent or pay? Be prepared to evidence the decision
A publisher should be able to explain not just what its banner says, but how the business model, fee, equivalent service, consent design and technical controls were assessed and monitored.
- Why personalised advertising is used
- Why consent is relied upon
- How the fee was assessed
- Whether price creates unfair pressure
- How service equivalence was reviewed
- How existing subscribers are treated
- What technologies operate under each choice
- How consent is withdrawn
- How implementation is monitored
Independent review
Does your consent journey match your privacy wording?
CookieBanner.co.uk reviews public consent controls, policy statements and technical behaviour across fresh-visitor, accept, reject and withdrawal states.
CookieBanner.co.uk view
Consent or pay should not automatically be labelled unlawful
But neither should the presence of a payment option automatically validate consent.
Publishers have legitimate commercial interests and high-quality journalism requires sustainable funding. At the same time, where consent is used for personalised advertising, readers should be able to understand the exchange and exercise a genuinely meaningful choice.
A robust review asks whether the user understands personalised advertising and tracking; whether the fee is appropriate; whether both routes are presented fairly; whether the core service is broadly equivalent; whether unrelated purposes are separated; whether non-essential technologies remain inactive until valid consent; whether rejection works; whether consent can be withdrawn easily; whether privacy preferences survive account and device changes; and whether the technical behaviour matches the public explanation.
The future of online publishing may not be a choice between privacy and journalism. The better question is how sustainable journalism can be funded without making meaningful privacy available only to those who pay.
Consent-or-pay cookie banners: common questions
Is consent or pay legal in the UK?
Can a website make me accept cookies to read content?
Is advertising the same as personalised advertising?
Does paying mean I will see no adverts?
Can I withdraw cookie consent after accepting?
Editorial note
About this investigation
This article is an independent review of publicly available information and UK regulatory guidance. It does not conclude that any named organisation has breached UK GDPR, PECR or any other law.
Descriptions of individual services are based on publicly available information reviewed up to 12 July 2026. Website interfaces, prices, policies and technical implementations may change.
A conclusive cookie-compliance assessment may require direct technical testing, including examination of storage technologies, network activity, consent records and website behaviour before consent, after rejection and following withdrawal.
Leave a Reply