Consent Management Platform

from Wikipedia, the free encyclopedia

A Consent Management Platform ( Engl. Platform for the management of consent , in short CMP ) is a software , with the website operators or providers of web apps via a banner or a pop-up a data protection agreement catch the visitor and save before user data are recorded via website scripts ( tracking ).

The Transparency and Consent Framework of the Interactive Advertising Bureau defines the term Consent Management Platform as "the company or organization that centralizes and manages the transparency for and the consent and contradictions of the end user."

meaning

If the processing of personal data is not otherwise permitted, it requires the consent of the person concerned, in the EU according to Art. 6 Para. 1 lit. a and 7 of the General Data Protection Regulation . Consent must be given voluntarily before the start of data processing and on the basis of sufficient information to the person concerned . With a consent management platform, effective consent can be obtained from users through an upstream query the first time a website or web app is accessed.

function

When a website is opened for the first time, i.e. with the first HTTP request , the Consent Management Platform displays a banner or a pop-up as a separate HTML element. Website scripts defined by the operator that collect user data and require consent for this are only executed after consent has been given, for example by ticking a box or clicking a button. The information provided by the user is saved by the Consent Management Platform so that the consent banner does not have to be displayed again when the website is accessed and so that the consent is secured for evidence purposes. Finally, the Consent Management Platform enables a subsequent change or the revocation of the consent given, for example via a button in the data protection declaration ( opt-out ).

Individual evidence

  1. ^ IAB Europe Transparency & Consent Framework Policies. In: IAB Europe. April 8, 2020, accessed April 28, 2020 .
  2. ↑ a b Kristin Benedikt, Alexander Buckel, Jan-Hendrik Mammen: Implement GDPR and ePrivacy-VO on websites . 2018, ISBN 1-72019-947-7 , pp. 298 .