A cookie audit is a structured review of all cookies and tracking technologies active on a website, documenting each cookie's name, purpose, lifespan, provider, and category. A cookie audit is the essential first step in GDPR and ePrivacy compliance — you cannot obtain valid consent for cookies you have not identified. Audits frequently reveal undisclosed cookies introduced through third-party integrations, embedded social media widgets, analytics tools, and advertising pixels. Organizations should run cookie audits quarterly to catch new cookies added through platform updates. A cookie scanner automates much of the audit process, but results must be reviewed and categorized by the site owner.