Configure Global Privacy Protocol (GPP) framework

Access Type: Regulations Manager - Editor

The Global Privacy Protocol (GPP) is a technical standard developed by the IAB Tech Lab that is a modular transport layer to communicate an end-user's consent throughout the digital advertising supply chain and offers support for U.S. State privacy regulations. In this article, we will cover how to

• Enable Global Privacy Protocol (GPP) framework

• Configure GPP String settings

Note: The Global Privacy Protocol framework can only be implemented on regulations that utilize country/region as a data collection scope.

---

Enable Global Privacy Protocol (GPP) framework

In order to enable the Global Privacy Protocol (GPP) framework on a regulation, click Regulations Manager on the left-hand panel.

Navigate to a regulation that utilizes country/region as the data collection scope on the subsequent list and click the Edit icon inline with a regulation name.

Ensure that the Global settings tab is selected and navigate to the Frameworks section. Enable the toggle inline with MSPS GPP.

The Global Privacy Protocol (GPP) framework will be enabled on the regulation.

Configure GPP String settings

With the Global Privacy Protocol (GPP) framework added to the regulation, select the Frameworks tab and expand the GPP - Global Privacy Platform accordion.

There are two settings that your organization can configure for the GPP String:

• MSPA signatory

• US Privacy string configuration

MSPA signatory

The Multi-State Privacy Agreement (MSPA) is a complementary legal framework to the Multi-State Privacy String (technical signal) which is a joint legal agreement across industry participants that dictates obligations of partners on how the framework should be used in practice so that all participants have confidence that the framework is being used appropriately and in the same way.

Didomi strongly recommends visiting our dedicated resource on the Multi-State Privacy Agreement (MSPA).

If your organization is a signatory of the Multi-State Privacy Agreement (MSPA), enable the toggle inline with MSPA signatory.

Use the provided field to input your organization's MSPA ID and select the toggle for the mode in which your organization operates within the MSPA.

US Privacy string configuration

When an end-user submits their consent decisions, those decisions are captured and communicated via an encoded section of the GPP String. Each section represents a unique privacy signal.

For U.S. States that have a supported state section in the GPP String, your organization can select whether you wish to utilize the U.S. State section or U.S. National section to store an end-user's consent. U.S. States that do not have a supported state section in the GPP String will default to the U.S. National section.

Be advised that the U.S. National section should only be used by signatories of the Multi-State Privacy Agreement (MSPA). While Didomi does not block the use of utilizing the U.S. National section for non-signatories, doing so introduces risk for your organization since the section would not have the legal backing of the agreement. Click here to learn more.

In order to change the privacy section used for a U.S. State with a supported U.S. State privacy section in the GPP String, navigate to the US Privacy String Configuration card and click the desired section inline with the state.

Bulk edit privacy section for U.S. States

Your organization can leverage a bulk action to set the privacy section for multiple U.S. States simultaneously. To do so, click the checkbox to the left of the U.S. State you wish to include in the bulk action.

Use the provided drop-down menu to select whether to set the selected states to use the U.S. National privacy section or U.S. State privacy section. Click Apply to all selected when finished.

If applying the U.S. State privacy section to a U.S. State that does not have a supported U.S. State privacy section in the GPP String then that State will continue utilizing the U.S. National privacy section as the default.