Configuring the Global Privacy Protocol Settings

Using Cookie Consent, you can enable the IAB Global Privacy Protocol (GPP) for enhanced compliance with US data privacy laws. GPP is available for web templates in addition to mobile and CTV/OTT templates for iOS, Android, and Roku. GPP is also available for Consent Management Platform (CMP) APIs.

Important:

CMP APIs are under Public Preview. Please contact OneTrust Support to request early access.

The IAB GPP helps address the challenges posed by the growing number of different privacy regulations worldwide. Implementing OneTrust with the IAB Global Privacy Protocol Consent empowers publishers to streamline the vendors and advertising content which appears on their websites.

Note:

GPP for IAB Transparency and Consent Framework EU 2.2 is currently available for preview. To enable this feature, contact OneTrust Support.

For more information on the GPP, see Global Privacy Protocol: Detailed Overview and Global Privacy Protocol FAQ.

To enable the Global Privacy Protocol

  1. On the Cookie Consent menu, select Templates. The Templates screen appears.

  2. Configure a new template. For more information, see [→Adding, Editing, and Managing Cookie Consent Templates].
  3. Once the template is created, ensure the text and styling for your Banner and Preference Center are configured as desired. For more information, see Customizing the Banner Template and Customizing the Preference Center Template.
  4. On the Cookie Consent menu, select Geolocation Rules. The Geolocation Rule Groups screen appears.

  5. Create a new Geolocation Rule with your newly created template or edit an existing Geolocation Rule to leverage your new template. For more information, see Configuring Geolocation Rules.
  6. In the Integrations section of the rule, enable the IAB Tech Lab - Global Privacy Protocol (GPP) setting.
  7. Configure the fields by mapping categories to GPP purposes. For more information, see GPP Settings Screen Reference.

    For more information on configuring categories, see Configuring Purposes.

  8. Click the Save button.
  9. Publish your script. For more information, see Implementing Cookie Consent Scripts.
Note:

If leveraging the Unified Consent feature with a GPP-enabled template, the GPP string will be sent instead of the TC String. The string will populate in the receipt. This same string will be stored on the data subject profile in UCPM.

You can retrieve the string by following the steps found here.

GPP Settings Screen Reference



Field
Description
Global Privacy Protocol

Enable this setting to enable the Global Privacy Protocol. You can indicate which categories can be mapped to additional purposes specified as part of GPP or you can choose to not assign a category at all.

Select a category to which each purpose should map.

Purpose

Description

Sale of Personal Information

Consent to/opt-out of the sale of the consumer’s personal data.

Sharing of Personal Information

Consent to/opt-out of the sharing of the consumer’s personal data.

Personal Data Consent

Consent to collection, use, retention, sale, and/or sharing of the consumer’s personal data that is unrelated to or incompatible with the purpose(s) for which the consumer’s personal data was collected or processed.

Known Child Consent

Select Not Applicable if your business does not have actual knowledge that it processes Personal Data or Sensitive Data of a consumer who is a known child, whether the child is above (13–16) or below 13 years of age.

If applicable, configure the purposes for each age range.



Purpose
Description
Consent for Personal Data from Age 13 to 16

Consent to/opt-out of processing personal data or sensitive data for consumers from age 13 to 16.

Consent for Personal Data Younger than 13 Years of Age

Consent to/opt-out of processing personal data or sensitive data for consumers younger than 13 years of age.

Sensitive Data Processing

Select Not Applicable if your business does not process the specific category of Sensitive Data.

If applicable, configure the purposes for each category.



Purpose
Description
Racial, Ethnic

Consent to/opt-out of processing sensitive data revealing racial or ethnic origin.

Religious Beliefs

Consent to/opt-out of processing sensitive data revealing religious beliefs.

Health

Consent to/opt-out of processing sensitive data consisting of mental or physical health information.

Sexual Orientation

Consent to/opt-out of processing sensitive data revealing sexual orientation or sex life information.

Immigration

Consent to/opt-out of processing sensitive data revealing citizenship or immigration status.

Genetic Data

Consent to/opt-out of processing sensitive data consisting of genetic data for the purpose of uniquely identifying a natural person.

Biometric

Consent to/opt-out of processing sensitive data consisting of biometric data.

Geolocation

Consent to/opt-out of processing sensitive data consisting of precise geolocation data.

Sensitive Personal Information

Consent to/opt-out of processing sensitive data consisting of a consumer’s social security, driver’s license, state identification card, or passport number.

Sensitive Security Information

Consent to/opt-out of processing sensitive data consisting of a consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.

Union Membership

Consent to/opt-out of the use or disclosure of sensitive data that reveals union membership.

Communication

Consent to/opt-out of the use or disclosure of sensitive data consisting of the contents of a consumer's communications.
Generate State Specific String

Enable this setting to generate state-specific strings to use alongside the selected template.

Multi-State Privacy Agreement

Enable this setting to confirm whether the platform adheres to the Multi-state Privacy Agreement.

GPP Stub

You can place the GPP stub before the regular OneTrust stub to allow the GPP APIs to initialize earlier and queue up all calls until the OneTrust SDK loads.

You can access the GPP stub here.