What is a Cookie Banner or CMP?
A consent management platform (CMP) is a tool often referred to as a “cookie banner” that enables a website or app to comply with data privacy laws such as the EU General Data Protection Regulation (“GDPR”) by providing site visitors with pertinent information about personal data collection and giving the site visitor a choice to Accept or Decline to have personal data processed and/or tracking technologies deployed during their site visit.
This type of consent is sometimes referred to as “opt-in” consent and other data privacy laws that require it include at least the following:
- ePrivacy Directive
- Brazilian Data Protection Law, the Lei Geral de Proteção de Dados Pessoais (“LGPD”)
- Canada Consumer Privacy Protection Act (“CPPA”)
- Quebec Law 25, An Act to Modernize Legislation Provisions Respecting the Protection of Personal Information (“Law 25”) regarding obtaining informed consent to use tracking technologies and lawfully collect personal data.
Specifically, a CMP informs site visitors about the tracking technologies used on a site and the personal data processed by the site for specified purposes. The CMP prompts the site visitor to affirmatively consent or decline the tracking and personal processing activities. In addition, a CMP collects and manages a record of the visitor’s choice to consent or decline, and should have the ability to pass that recorded preference to downstream ad partners to allow those partners to recognize and honor the user’s preferences.
How Do I Get NextRoll’s CMP?
Current Customers
- On the dashboard, navigate to Settings > GDPR and select NextRoll’s Cookie Consent Banner
-
If you have opted to use NextRoll’s Cookie Consent Banner, NextRoll provides updates required by law or through the Interactive Advertising Bureau’s Transparency and Consent Framework. To learn more about the IAB’s TCF, please visit this link.
- For example, NextRoll will automatically show its consent banner to site visitors from jurisdictions that require opt-in consent to process personal data and/or use tracking technologies.
- This includes jurisdictions such as: Europe, Brazil, the Province of Quebec (as of September 22, 2023).
New Customers
- When you sign up for the AdRoll or RollWorks services, you will identify the country where your company is located.
- You will navigate to a “Gather Consent” page that allows you to select the NextRoll Cookie Banner
Can I Use a Different Cookie Consent Banner?
Yes! But . . .
Be sure to consult with a privacy professional or attorney knowledgeable about the data privacy laws of the regions where your site will be accessed and where your country is located. For example, if your company is located in Europe, it will have to comply with GDPR even if you only want to attract site visitors from the United States.
This Help Center article provides best practice information when using an in-house or third-party consent banner that is not controlled and operated by NextRoll.
When will the next version of the NextRoll Cookie Consent Banner launch?
By November 20, 2023, the newest IAB TCF consent banner (version 2.2) will be deployed.
I see an icon on my site with the NextRoll logo on it. Why is it there?
As part of following TCF v2.2 guidelines, We have built a persistent icon that stays at the bottom of the page to enable easy access to the consent banner and its preferences to the end consumer.
Can I remove the persistent icon?
No. At this time you cannot remove the persistent icon as it is mandatory under new IAB TCF v2.0 guidelines.
Can I change the position of the banner?
Not at this time. However, we are actively working on providing some customization options.
Does this new consent banner impact my campaign setup?
There should be no impact on your campaign and dashboard settings.
My business is not located in the EU, Quebec or Brazil. Do I still have to use the cookie consent banner?
NextRoll cannot provide legal advice. Please consult your legal officer for the best practice for your business.
If you have more than 10% of website visitors coming from the EU then you have to comply with GDPR regulations and need to use a cookie consent banner.
If you have website visitors coming from Quebec then you have to comply with Law 25 and need to use a cookie consent banner.
My business is in the EU or Canada but I only run campaigns targeting US consumers.
NextRoll cannot provide legal advice. Please consult your legal officer for the best practice for your business.
As long as you are located in GDPR-impacted locations or Quebec. You are obligated to use a cookie consent banner in order to comply with regulations.
Who can see the NextRoll Cookie Consent Banner?
If the business using the NextRoll Cookie Consent Banner is located in the EU or Brazil or Canada, then it will be visible to all residents from locations in Europe in the European Union and the United Kingdom; Brazil; and Quebec (until a Canadia federal law is effective and enforceable).
If the business using the NextRoll Cookie Consent Banner is not located in the EU or Brazil or Canada, then it will only be visible to website visitors with EU, Brazilian or Quebec IP addresses.
What’s the size of the new cookie consent banner?
Size: 600x376 px
Is there an option to change the position of the Persistent Icon?
Yes! We are working on building a UI option to move around the persistent icon. In the meantime, the customers follow these instructions to manually move the position.
What is IAB?
The Interactive Advertising Bureau (IAB) empowers the media and marketing industries to thrive in the digital economy. Its membership comprises more than 650 leading media companies, brands, and technology firms responsible for selling, delivering, and optimizing digital ad marketing campaigns. The trade group fields critical research on interactive advertising, while also educating brands, agencies, and the wider business community on the importance of digital marketing.
What is TCF v2.2?
The TCF is a framework for creating a uniform CMP. TCF stands for “transparency and consent framework” and the IAB provides detailed information on its site about the policy and specification: https://iabeurope.eu/transparency-consent-framework/
The overall purpose of TCFv2.2 is to provide website visitors with clear and effective notice of the data collection technologies, practices, and purposes for processing personal data to allow users to make informed choices and record the preferences expressed in a manner easily honored across the ad tech ecosystem via technical means.
As per IAB Europe, “The IAB Europe Transparency and Consent Framework (TCF) is the only GDPR consent solution built by the industry for the industry, creating a true industry-standard approach”. The TCF now includes a framework that tracks Law 25 in Quebec. TCF allows advertisers to disclose their relationship with vendors present on the website or app. By disclosing the preferred vendors, the IAB helps the advertisers obtain consent or express their asserted legitimate interest as the lawful basis for processing personal data.