To support the update and continue to serve ads effectively in the EEA and UK, I took the following steps to help teams prepare:
- Worked with existing CDP vendor to understand their current consent management offerings and if they would become Google-certified.
After a review of their capabilities, a full understanding of Google’s requirements, and conversations with our adops and legal team about future privacy implications, the recommendation to onboard an official CMP platform to the tech stack was made to the product and operations lead.
- In the interim, it was decided to use Google tooling to establish privacy messaging for the EEA and UK regions and send that consent back to the CDP. I directed legal, adops, and design teams through the process of aligning user-facing privacy language and inputs to configure consent opt-in and opt-out choices that aligned with our privacy policy. Collaborating with adops and engineering, we implemented the required TCF string to effectively collect, store, and change users’ data.