We are writing you with an important update regarding your use of our IAB TCF v2.0 integration.
We ask that you take five minutes to read through this as it concerns changes that will affect the implementation on your website.
IAB implementation policies
As an IAB CMP we are required to ensure compliance with the IAB TCF v2.0 policies on usage and implementation across all our customers' banners.
In the words of the IAB:
"Non-compliant CMP implementations undermine the reputation of the TCF and expose participating organisations to serious legal risks. As the only visible point of contact with the user and authorities, CMPs have a responsibility and obligation under TCF policies to ensure that the market implements compliant versions of the UI." (IAB TCF v2.0 policies)
Failure to comply with the IAB policies has severe consequences as this will result in expulsion of Cookiebot as an IAB TCF v2.0 CMP.
Cookiebot's IAB solution
The IAB is currently assessing all CMP solutions and checking them for policy compliance.
In doing so, the IAB has identified a handful of Cookiebot implementations that despite our best efforts to guide our customers do not meet the IAB policy standards. Our solution has passed IAB verification and certification for TCF v2.0 on all technical aspects in April 2020. However, IAB has since then found that the wording of the banner content in some cases do not meet the requirements of the IAB compliance policy. Due to this we are now facing exclusion from the IAB framework, unless we act.
Because of this we have taken drastic measures to force compliance on our IAB integration solutions. We do this in order to ensure that we can keep this integration running for all of our customers requiring it.
Necessary changes to our solution
On 13 August 2020 at 11am (CEST), all IAB banners will automatically be changed to comply with the IAB TCF v2.0 banner policies. No action is required on your part.
- All banners must offer a clear opt-out option. Banners not complying will be changed to the banner template type "Multilevel with three buttons: Reject All/Selection/Allow All".
- All banners must contain a new mandatory IAB approved text. This text must be shown and may not be altered. You can see the banner text here.
The above changes will be implemented through an automatic overwrite, as the banner is being displayed, for those banners that do not already meet the requirements.
This means that if you are currently showing a banner with an opt-out button, only the text will be added. If you are showing a banner with no opt-out option, then your banner will be changed to the "Multilevel with three buttons: Reject All/Selection/Allow All". Please see more about the changes we apply when showing the banner, including information on pre-ticked checkboxes here.
After the transition, you may add custom text to the banner, below the mandatory IAB text. We recommend that you use the custom text to highlight how consent can be withdrawn and with a link to your cookie declaration. See more on how to use this option.
Unfortunately, the deadline for this change is set in stone and we will not be able to accommodate any exceptions to these changes or to postpone the forced implementation date.
Alternatives – using Cookiebot without the IAB framework
You can operate your website with ads without making use of the IAB framework with Cookiebot. The Cookiebot consent solution allows you to integrate ad solutions the exact same way you do today, without the IAB framework integration activated. The Cookiebot solution will run scripts and ad integrations as the submitted consent allows, making sure ad vendors get activated as intended. The only difference will be that the adtech vendors will not receive a signal through the TCF but can instead assume that full consent has been given when their tag is loaded and active on the website. This does not stop any vendor from serving the right ads in the cases where the user opts in as the use of the IAB framework is not a requirement to obtain the users' consent values. With Cookiebot these are readily accessible to any ad vendor through our SDK, documented on our website.
By running the banner without the IAB framework integration you are free to design the visual appearance of your consent banner beyond the IAB policies.
Get in touch! Please respond to this email with any questions and we will do our best to help.
With kind regards,
The Cookiebot Team