A Consent Management Platform gives Web site visitors control over which cookies and tracking technologies they accept. The platform stores these preferences and forwards them to your marketing tools and analytics systems. Thus, only data for which explicit consent has been given is collected. The CMP documents all consents given with date and user details. A CMP is crucial to demonstrate your compliance with privacy laws such as the AVG/GDPR. If you want more information on how a Consent Management Platform works, read on here.
The cookie banner is only the visible part of the Consent Management Platform. Visitors see the pop-up asking for cookie consent, while the CMP constitutes the entire system that records, stores and transmits consents. An effective CMP provides extensive functionality such as cookie categorization, permission logs and blocking of scripts until consent is obtained. Read more about the differences between a CMP and a cookie banner here.
Setting up a CMP follows these steps:
For more information on setting up a consent management platform, please refer to this article.
Formally, a CMP is not required by law, but practically indispensable when using non-essential cookies. The AVG/GDPR and ePrivacy guidelines require valid consent before personal data is processed. A CMP provides the most effective way to collect, manage and demonstrate compliance with these consents. Without adequate consent management, you risk fines that can reach millions of dollars. Read more about the obligation of a CMP.
A Consent Management Platform (CMP) manages website visitors' consents to data collection. It allows users to choose which cookies they accept and stores these preferences. The main tasks of a CMP include displaying the cookie banner, tracking which visitors have given which consent, passing this information to your tracking tools and blocking unauthorized scripts.
The privacy police won't come knocking down your door right away without a cookie banner, but you're at risk! If your website uses more than just strictly necessary cookies, privacy laws require you to ask permission. So yes, for most websites that irritating pop-up is really mandatory. Not in the mood for fines running into tons? Then place that banner anyway!
Without a cookie banner, you risk fines of up to €20 million or 4% of your annual turnover when using non-essential cookies. The Personal Data Authority is enforcing consent requirements ever more strictly. In addition to financial consequences, it can also lead to reputational damage and loss of consumer trust. Consumers can file complaints, which can result in enforcement investigations and possibly legal action.
The consent visitors give via your cookie banner is largely processed automatically by your Consent Management Platform (CMP). The platform stores the choices and communicates them to your website.
Are you using Google Tag Manager for your tracking setup? Then some manual work is required. You need to associate tags with the appropriate permission categories so that they activate only when visitors have given permission. This means configuring triggers that verify that the necessary permission is present before tags are fired. You can read how to set up a CMP in conjunction with Google Tag Manager in our roadmap.