Why should you read this article?

Because understanding how the consent chain works is important to publishers who want to ensure GDPR compliancy.
Mathilde Pasquali

The IAB Europe’s Transparency and Consent Framework helps actors in the digital advertising chain ensure they are GDPR compliant regarding the accessing of data and/or processing of personal data. The Framework is especially relevant for publishers (first parties) who partner with third parties to enable those third parties to process user data. It provides a standardized mechanism for requesting, storing and sharing user consent along the supply chain. Smart is fully compliant with this framework.

The purpose and vendor lists

At its core, the framework has two important lists:

A) A common list of personal data processing purposes

-storage and access of information


-ad selection, delivery, reporting

-content selection, delivery, reporting


B) A common industry-wide vendor list

All the technical platforms in the advertising supply chain that can store and process personal data. Smart is registered on this list as a vendor.

How it works

1. The publisher implements a Consent Management Provider (CMP) on the website/app. Smart provides a web CMP and an open source SDK CMP for iOS and Android.

2. In the CMP user interface, the user is asked for which purposes (“purpose choices”) and by which vendors (“vendor choices”), his or her personal data may be used.

3. The user’s responses result in a purpose choices string and a vendor choices string. Then, both strings are compressed to get the final consent string

gdpr consent string 1
Source: IAB Europe

4. The consent string (consent string payload) is then shared and propagated along the supply chain to make the user’s choices known to each party involved.

All the parties in the supply chain can read the consent string payload and detect if they have (green) or do not have (red) the user’s consent

Source: IAB Europe


Related news

Article May 25 2018

Last Call for GDPR

The new European rules and regulations are coming into force on May 25! Are you sure you’ve done everything to be GDPR compliant? Get CMP, SDK and compliancy info in this blog post.

Article May 23 2018

GDPR: Get Your Mobile Apps Ready

GDPR will go into effect in 3 days. So, you’ve got 3 days left to ensure that all your digital assets are compliant with the new European rules and regulations. Here are a few reminders to help you get ready for Friday.

  • Last week, Smart sponsored the annual Engage Conference (Italy) around advertising and digital communication themes… https://t.co/vovrTDDODZ
  • Our Country Manager of the DACH Region will sit on a panel about "Media Buying Instream and Outstream: What is miss… https://t.co/JjKK0SdMpZ
  • 1 hour left!! The expert workshop "Why is programmatic guaranteed the ultimate level in private transactions?" will… https://t.co/t19JrJM41P
  • Featured on @CB_News Omnicom Media Group-OMG has just announced its latest offering, via SmartRTB +, to help client… https://t.co/FsCkBVGmEu
  • An in-depth profile feature with Smart's newly appointed CEO Arnaud Creput on @Strategies written by @ManuGavard Se… https://t.co/p1J38ZbgFE