So following discussion w/ the TL who manages the cookie matching service, it sounds like you have some options. Strictly speaking, failing to populate
gdpr_consent with a TC string when
gdpr=1 will result in dropped matches in the very near future. Alternatively, you may want to use
process_consent if it is not possible for you / your advertisers to produce a TC string–it is described
here. Finally, in Google-initiated cookie matching flows, Google would only place a match tag in instances where consent was granted. With this in mind, I'd recommend either making use of
process_consent or using a different cookie matching workflow.