The PrivacyOps approach enables organizations to comply with the applicable cookie consent requirements in the following manner:
Automatic scanning and categorization of cookies The first step of effective cookie consent management is the automatic scanning of a website to determine which cookies a website drops when a data subject visits the website. Automatic scanning has the following benefits:
Categorization of cookies by their properties and retention periods. The two broad categories of cookies are essential and non-essential cookies,
Auto-blocking and deactivation of non-essential cookies on landing pages before the collection of data subject’s consent,
The detection of cookies with no expiry date or infinite expiry dates.
Informing data subjects by deploying cookie consent banners After cookie scanning and categorization has taken place, the next step is to obtain the data subject’s consent or inform them of the use of cookies. This requires organizations to deploy cookie consent banners per the applicable legal requirements of the geographical location. Therefore, the correct cookie consent banner type (opt-in vs. opt-out cookie consent banner) is displayed. The PrivacyOps approach enables organizations to build cookie consent banners by:
It provides relevant information about the use of cookies to data subjects on cookie consent banners. Organizations can do this by giving layered information, so many banners have first and second information layers.
It also makes the accept and reject buttons equally prominent and informs data subjects of their rights to opt-in or opt-out of cookies.
The platform also enables data subjects to select and deselect individual cookies based on cookie categories or purposes.
Also, the platform allows organizations to drop non-essential cookies only after the data subject has consented to them.
Preference center and honoring consent revocations The preference center enables organizations to honor consent revocations and any changes to data subject’s preferences concerning the use of cookies. Organizations can implement it directly on the organization’s website, or the website may include a link that takes data subjects to the preference center. The use of a preference center has the following benefits:
If a data subject changes their preferences for cookie usage, organizations can implement those changes immediately. For example, if a data subject withdraws consent, the respected cookies will be automatically blocked or deactivated.
The preference center is available at all times to data subjects, and therefore, they can change their cookie preferences at any time at will,
The preference center allows data subjects to withdraw consent via the same electronic user interface without going through any additional steps, a user-friendly and easy method.
Audit trails In the fourth step, an organization needs to keep an updated audit trail consisting of all consent records. The PrivacyOps platform enables organizations to maintain updated and comprehensive audit trails by capturing the exact text of the agreement to which the data subject consents and the types of cookies they consent to.
The use of audit trails ensures documentation of consent in the following ways:
