Updated GDPR Banner Guidelines (France & UK)

In October 2020, the CNIL, the French data protection authority, released updated guidelines around the experiences end users should encounter when interacting with consent notices. This ruling falls within the mandates of GDPR and updates of the required specifications of what controls must be included in the first level (banner) notice experiences.

 

Instructions for updating your site notices to comply with the CNIL ruling can be found here.

 

The CNIL ruling highlights

The CNIL has determined that the following new banner requirements must be adopted by March 31, 2021:

• Inclusion of Accept and Decline buttons
• Exclusion of banner walls; e.g., cannot force a user to provide consent in order to avail themselves of the full website experience
• Provision of link to appropriate policy (either cookie or privacy) on the first level (banner)
• Specific time period until the company may request consent again. Note that the preference cannot be deleted for 13 months.*
• Inclusion of the number of partners/3rd parties on the first level (banner)
• List all categories of 3rd parties on the first level (banner)
• Banner required to disappear after short time lapse (e.g., 10 to 20 seconds) if the user has not made preference selections.

*Recommended duration of valid consent is now 6 months.

 

New consent banner settings

These updated banner settings will appear in the Universal Consent Platform in early-March 2021, where you will have access to a new default banner style within UCP that supports the new features.

 

For any questions regarding these updates, contact your Customer Success Manager.