Server-specific disclosures and consent take priority over global consent. If a user makes a global consent choice first, and then later makes a service-specific choice, the service-specific choice will determine a user’s consent status for that service.

Yes, a CMP is essentially just a mechanic for making sure that disclosures are made about a publisher’s approved vendors are made and that the consent signal is generated and transmitted in a standardised way, rather than writing and agreeing new protocols for each publisher/vendor relationship. A publisher may choose to act as a CMP or to use a commercial provider to implement the function on their behalf.

Publishers have full control over which vendors they wish to work with. We are proposing that publishers only work with vendors on the List. The List will be vetted and all vendors will be required to strictly follow policies and procedures in order to participate. Vendors will need to register on the List in order to use the Framework. Vendors rather than publishers will be responsible for complying. Publishers control which vendors they want to use from the List. Publishers may choose to work with vendors who are not on the List, but they will not be presented as part of the Framework.

The List includes standardised definitions of processing purposes and, when registering, vendors are required to select the purposes for which they wish to collect and process personal data. One vendor may be collecting and processing personal data in a manner that they believe requires consent while another may be collecting and processing personal data in a manner that does not require consent. The List currently enables vendors to declare against five purposes.

Publishers decide how a request for consent is presented to consumers. We have some minimum policies related to vendor disclosures to ensure that the manner in which preferred vendors are disclosed to a publisher’s users meets legal requirements, and to ensure the signals a publisher sends about vendors consent status are clear.

This is an open source industry solution and will be maintained as such by the industry. Publishers are not required to pay to use the Framework. CMPs are required to pay to use the Framework, as well as publishers operating as a CMP, as each needs to be assigned an ID and a delegated sub-domain. The payment supports the administration of operating the CMP list. IAB Europe will charge a fee of EUR 350 per year.