Also known as: cookie banner · CMP · consent banner
Consent management is the process of obtaining, recording, and honouring users' choices about the processing of their personal data, most visibly through the cookie and tracking consent banners required by privacy law.
Valid consent under laws such as GDPR must be freely given, specific, informed, and unambiguous — with rejection as easy as acceptance. Regulators have repeatedly ruled against interfaces that make accepting one click and refusing several.
Banner fatigue has undermined the mechanism's intent: consent obtained by wearing someone down is technically recorded and practically meaningless. Automated signals such as Global Privacy Control, which express a standing preference at the browser level, are a more durable direction.
GDPR
The GDPR (General Data Protection Regulation) is the European Union's data protection law, which governs how personal data of people in the EU may be collected and processed, and grants individuals rights over their data regardless of where the processing organisation is based.
CCPA / CPRA
The CCPA, as amended by the CPRA, is California's consumer privacy law, granting residents rights to know what personal information businesses collect about them, to delete it, to correct it, and to opt out of its sale or sharing.
Third-Party Cookie
A third-party cookie is a cookie set by a domain other than the one shown in the address bar, historically the primary mechanism allowing advertising networks to track individual users across unrelated websites.
Data Subject Rights
Data subject rights are the legal entitlements individuals hold over their personal data, typically including the rights to access, correct, delete, port, and object to the processing of information held about them.