Recently, Google has announced new consent management requirements for publishers and developers using Google AdSense, Ad Manager, or AdMob to serve ads to users in the European Economic Area (EEA) and the United Kingdom (UK). These requirements aim to ensure compliance with privacy regulations while enhancing transparency and user consent.
1. What is CMP?
A Consent Management Platform (CMP) is a system or technological platform used to manage and control user consent regarding the collection and use of personal data online. CMP helps organizations comply with data protection regulations such as the General Data Protection Regulation (GDPR) and similar regulations worldwide.
2. Ways CMPs are certified by Google
2.1 Publishers working with CMPs
To ensure a smooth transition process, publishers currently working with CMPs should proactively engage with their providers regarding the certification process.
2.2 Publishers with their own CMPs
Publishers with their own CMPs can express interest in completing certification for their CMPs. Learn more about CMP certification.
2.3 Publisher seeking a CMP
For publishers seeking new CMP partners, they can explore the list of Google-certified CMPs mentioned above. We regularly add additional CMPs as they become certified. Refer to the list of Google-certified CMPs.
2.4 Publishers utilizing GDPR user consent and Google’s Privacy Notification
We encourage publishers to consider which CMP solution is best for them. To support publishers, GDPR user consent notifications for Ad Manager, AdSense, and AdMob publishers are provided in the Privacy and Notification tab and are certified according to the new TCF requirements.
3. Integrating CMP (GDPR) in GAM
3.1 Integrating CMP on an App
Step 1: Add website/application.
1. Sign in to Google Ad Manager
2. Click Inventory -> Apps -> Add app.
3. Select the app’s platform
- Android
- iOS
- Roku
- Amazon Fire TV
- PlayStation
- Xbox
- Samsung TV
4. Select Yes, the app is listed on a supported app store.
5. Click Continue.
6. For apps listed in Google Play, the Apple App Store, or a supported Connected TV store, select the supported stores for mobile apps or CTV where your app is listed and then click Continue.
7. Review your app details and click Add app. Newly claimed apps appear in the table.
Step 2: SDKs for App
Hệ điều hành iOS: https://developers.google.com/ad-manager/ump/ios/quick-start
Step 3: Create GDPR message
1. Click Create message.
2. Click Apps. The “Create your GDPR message” page opens.
3. Select the apps in which this message will be displayed
- Click Select apps.
- Select the desired apps: Add Privacy policy URL, list of Google-certified CMPs
- Click Confirm
4. Select the languages in which this message will be displayed
Default language: The message is shown in the default language when the user’s device language cannot be determined, or when the user’s device language doesn’t adequately match the selected “Additional languages.”
Additional languages: The message can be shown to users in any of the “Additional languages” that match the user’s device language. Languages you select here should match the languages in which your app is available. You can edit the message text for each of the “Additional languages.”
5. In the “Select the consent choices your users see” section, select one of the following options:
- Consent or Manage options: This message presents your users with a choice to consent to your ad partners and your ad partners’ purposes, or to customize their consent selections.
- Consent, Do not consent, or Manage options: This message presents your users with a choice to consent to your ad partners and your ad partners’ purposes, not consent to your ad partners and your ad partners’ purposes, or to customize their consent selections.
6. (Optional) Check the Close (do not consent) checkbox to add a close icon to your message. Users can click the close icon to dismiss the message and decline consent to your ad partners and their purposes.
7. In the “Targeting” section, select one of the following options:
- Countries subject to GDPR (EEA and UK): Display the GDPR message to app visitors in the EEA and UK.
- Everywhere: Display the GDPR message to all app visitors.
8. Click Continue. The “Edit message” page opens.
9. In the “Message name” field, enter a descriptive message name that will help you identify the message later. The name is shown only in the Privacy & messaging page and won’t be visible to users.
10. Optional) Edit and format (styling) the message to match your site’s editorial and visual standards.
When you’re ready, publish the message.
3.2 Integrating CMP on Website
Step 1: Add website/application.
1. Sign in to Google Ad Manager
2. Click Inventory -> Sites -> Sites you own
3. Click New site and enter the site URL, such as netlink.vn
4. Click Save
5. Add authentication in add.txt.
Step 2: Tag your sites
1. Click Privacy & messaging
2. Click GDPR
3. Click Tags & SDKs
4. Click Copy to copy First place the following HTML code between the and tags
5. Click Copy to copy … place the following code at the beginning of the tag
Step 3: Create GDPR message
1. Click Create message.
2. Click Sites. The “Create your GDPR message” page opens.
3. Select the apps in which this message will be displayed:
- Click Select sites.
- Select the desired sites: Site name (display user message), logo, Add Privacy policy URL (list of Google-certified CMPs)
- Click Confirm
4. Select the languages in which this message will be displayed:
- Default language: The message is shown in the default language when the user’s device language cannot be determined, or when the user’s device language doesn’t adequately match the selected “Additional languages.”
- Additional languages: The message can be shown to users in any of the “Additional languages” that match the user’s device language. Languages you select here should match the languages in which your app is available. You can edit the message text for each of the “Additional languages.”
5. In the “Select the consent choices your users see” section, select one of the following options:
Consent or Manage options: This message presents your users with a choice to consent to your ad partners and your ad partners’ purposes, or to customize their consent selections.
Consent, Do not consent, or Manage options: This message presents your users with a choice to consent to your ad partners and your ad partners’ purposes, not consent to your ad partners and your ad partners’ purposes, or to customize their consent selections.
6. (Optional) Check the Close (do not consent) checkbox to add a close icon to your message. Users can click the close icon to dismiss the message and decline consent to your ad partners and their purposes.
7. In the “Targeting” section, select one of the following options:
- Countries subject to GDPR (EEA and UK): Display the GDPR message to app visitors in the EEA and UK.
- Everywhere: Display the GDPR message to all app visitors.
8. Click Continue. The “Edit message” page opens.
.png)
9. In the “Message name” field, enter a descriptive message name that will help you identify the message later. The name is shown only in the Privacy & messaging page and won’t be visible to users.
10. (Optional) Edit and format (styling) the message to match your site’s editorial and visual standards.
11. When you’re ready, publish the message.
4. New Google requirements for managing consent when serving ads in the European Economic Area (EEA) and the UK (for publishers)
– New requirements for the Transparency and Consent Framework (TCF) by the Interactive Advertising Bureau (IAB).
+ Publishers serving ads to users in the EEA or UK must work with a Google-certified Consent Management Platform (CMP) that has integrated with the IAB’s Transparency and Consent Framework (TCF).
+ Google-certified CMPs are assessed against Google’s certification criteria for TCF compliance. While Google supports publishers working with non-registered ad technology providers through their Additional Consent specification, the CMP assessments ensure that CMPs supporting this specification can do so correctly. It is important to note that Google does not check CMPs for full compliance with the TCF or privacy laws.
– Timeline
The certification process for CMPs has already begun, and Google is working closely with CMPs to ensure compliance with the certification criteria. Later this year, publishers and developers using Google AdSense, Ad Manager, or AdMob will be required to use a certified CMP that has integrated with the IAB’s TCF. Google will provide more details regarding the timing of these changes in the coming months.
– Next Steps for Publishers
- Publishers already working with a CMP: Publishers who are currently using a CMP should proactively communicate with their provider about the certification process to ensure a smooth transition.
- Publishers with their own CMP: Publishers who have their own CMPs can register their interest in completing certification for their CMP. CMP certification ensures compliance with Google’s requirements.
- Publishers seeking a new CMP: For publishers in search of a new CMP partner, Google provides a list of Google-certified CMPs that can be considered. The list will be regularly updated as more CMPs receive certification.
- Publishers using Google’s Privacy & Messaging GDPR user consent messages: Publishers can consider the Privacy & Messaging GDPR support provided by Google for Ad Manager, AdSense, and AdMob publishers. These user consent messages are certified in accordance with the new TCF requirement.
- App publishers: Google offers the User Messaging Platform (UMP) SDK for app publishers, which provides additional features and support for GDPR messaging. Publishers can learn more about integrating the UMP SDK into their apps and creating GDPR messages for apps through the provided resources.
