Cookiebot and the IAB Consent Framework

To support publishers, technology vendors and advertisers in meeting the transparency and user consent requirements of the GDPR and ePrivacy Directive, IAB Europe (Interactive Advertising Bureau) has created the GDPR Transparency and Consent Framework.

As the framework is widely supported by the online advertising industry and an integration between Cookiebot and the IAB framework was requested by several Cookiebot users and resellers, Cookiebot is registered with IAB as a consent management provider (CMP) and has adopted the framework as an optional supplement to the core consent framework already included in the Cookiebot solution.

Concept

IAB’s consent model is fundamentally different from Cookiebot’s core consent model. In general, IAB’s model puts control in the hands of advertisers and vendors by signaling the user's consent to advertising vendors, whereas Cookiebot can block non-consented vendors and thereby gives control to the publisher, who is liable for all tracking performed by third parties on the publisher’s website. Nevertheless, the two consent models can co-exist on a single website.

When using the Cookiebot integration with IAB, an extra panel with the title "Ad Settings" will be available to the end user on the cookie banner's details-layer:

To ensure that vendors honor the user’s consent, Cookiebot’s scanner monitors all cookies and similar trackers used on the website. If an IAB-vendor does not honor the user’s consent, cookies set by the vendor will be marked up in the scan report with “Prior consent enabled: No”.

Implementation

Enabling the IAB framework with Cookiebot is straight forward: Just add the attribute “data-framework” to your existing Cookiebot tag with the value “IAB”, e.g.:

<script id="Cookiebot" src="https://consent.cookiebot.com/uc.js" data-cbid="00000000-0000-0000-0000-000000000000" data-framework="IAB" type="text/javascript" async></script>

If you are using Cookiebot with a tag manager, e.g. Google Tag Manager (GTM), which automatically strips all attributes but "src" from the script tag, you can enable the IAB framework by including the URL query "framework=IAB" in the tag src-attribute, e.g. "https://consent.cookiebot.com/uc.js?cdid=00000000-0000-0000-0000-000000000000&framework=IAB"

From there Cookiebot will automatically signal consent to any vendor using the IAB framework on your website.

Please note that Cookiebot as an IAB registered CMP is under the obligation to work only with publishers that are in full compliance with the IAB Framework policies. By activating the IAB framework in Cookiebot as described above, you confirm to comply with these policies.

For IAB Vendors

window.__cmp('ping', null, function(result) { console.log(result) });

window.__cmp('getConsentData', null, function(result) { console.log(result) });

Last updated: 3 August 2018