A Consent Management Platform (CMP) is a web software or SaaS that website operators or providers of web apps use to obtain and store data protection consent from visitors via a banner or pop-up before user data is collected via website scripts.
The Interactive Advertising Bureau’s Transparency and Consent Framework (TCF) defines the term consent management platform as “the company or organization that centralizes and manages transparency to and end-user consent and objection.”
In February 2022, the Belgian data protection supervisory authority APD, in consultation with the European Data Protection Board, ruled that the Transparency and Consent Framework, which many companies use to obtain consent via common software solutions, is unlawful. The IAB appealed against this decision.
The processing of personal data is not otherwise permitted, it requires the consent of the data subject, in the EU by section 6 (1) (a) and (7) of the General Data Protection Regulation. Consent must be given voluntarily before the start of data processing and based on sufficient information for the data subject. With a consent management platform, effective consent can be obtained from users through an upstream query when a website or web app is called up for the first time.