For the GDPR-curious: WTF is a CMP?
Those preparing for May 25, when enforcement of the General Data Protection Regulation begins, have likely heard a new acronym: CMP, or consent management platform. What is it, and why is it necessary? Here’s an explainer:
What’s a consent management platform anyway?
It’s the technical infrastructure a business uses to collect and store what data customers have consented to be used and for what. The CMP then feeds that information to other selected partners in the digital ad supply chain. The idea is that everyone in a publisher’s supply chain understands what data they may use and for what. Some brands, like telcos, have had consent management systems for several years. Some anti-ad-blocking tech providers have started to make it part of their offering.
Does the GDPR require businesses to have a CMP?
No, but it’s advisable. The Interactive Advertising Bureau Europe has said any business that’s classified as a data controller (any website owner with first-party data) needs to have a CMP if it wants to plug into its consent framework, which is a way of standardizing requests for consent across the digital ad supply chain.
What else can a CMP do?
Some can include data-preference centers where people can manage their own privacy settings. It can keep track of the consent process, from the point where a consumer first gives permission to the point when they adjust or remove their permissions, and ensures compliance by any ad tech vendor that’s been given consent by the publisher to use that data. Vendors can find out if they’ve been given consent or if they can no longer use the data via an application programming interface.
Are all CMPs the same?
There will likely be different degrees of sophistication. A basic version manages capturing consent, while a more advanced version takes in data on different stages of consent — not just opt-ins and opt-outs, but opt-downs, which is when customers want fewer messages from a business but don’t want to opt out entirely. “[A CMP] can integrate with existing data systems specifically to manage consent,” said Chad Wollen, CMO at ad tech vendor Smartpipe. “It integrates with your [customer] touch points [such as call centers and stores] so you can collect consent at different stages and at different occasions.”
Sounds straightforward. So what’s the catch?
Nothing is simple when it comes to the GDPR, and CMPs are no different. First, the more features a CMP has, the more it will cost. Publishers with multiple titles need to manage consent for the parent company, but also on the individual brand level. Publishers also have to gain consent not just for themselves, but for their ad tech partners. Also, once consent is given, that data can only be used for one purpose.
“The GDPR has caused people to think about this in a broad way, putting too high a focus on the initial gathering of consent — that one moment,” Wollen said. “But really, people need to think of the entry-level consent and then build the steps and paths to adding more consent for more products.”
‘Football has lost its soul’: How Copa90 is repositioning itself around the creator economy
Copa90’s overseers believe there’s another shift happening in tandem with the corporatization of the sport that has the potential to be just as transformative
Why The New York Times’ Wirecutter is ramping up focus on style
In early 2021, Wirecutter soft-launched a new dedicated style section and is is currently hiring for style-dedicated roles.
Meet the ‘absolutist’ with the Section 230 tattoo on Google’s new misinformation policy team
Part of a nascent government affairs and public policy team at Google, Jess Miers is a die-hard fan of the 26-word law that gives legal cover to big tech platforms.
SponsoredHow retailers can be ready for holiday shoppers this year
Suchi Sastri, managing director and partner, Boston Consulting Group As the holiday season approaches and the pandemic continues to evolve, retailers want to know what to expect. Will e-commerce continue to grow at the rate it did last year? How big of a role will in-store shopping play in holiday shopping? While it’s still early, […]
‘A perfect time for someone like me to be in this role’: Maria Reeve is breaking barriers at the Houston Chronicle
Maria Reeve didn’t set out to become the first person of color to oversee the Houston Chronicle’s newsroom. But now that she is, she’s making it count.
Maven rebrands to The Arena Group and reorganizes around sports and finance
The Arena Group owns and hosts the domains of over 200 sites and generated $143 million in revenue for the year ending June 30, 2021.