Comply with evolving data privacy regulations, such as CCPA, other US state-based privacy regulations, as well as other regional laws by adopting a standardized approach to collecting, managing, and transmitting user privacy and consent data in advertising.
Of particular relevance to digital publishers and advertisers, the IAB Global Privacy Platform (GPP) enables unified consent signaling across jurisdictions, ensuring transparency and user control.
Trusted and used by 30.000+ websites and companies worldwide.
CookieHub manages IAB GPP implementation for you. Once enabled, no additional setup or customization is required. CookieHub ensures your consent dialogs and privacy strings comply with IAB GPP specifications.
When you enable the GPP framework for a region, the correct privacy sections (known as “Sections” in GPP terminology) are displayed automatically.
If Google or other major vendors require IAB GPP signaling, CookieHub automatically enables the appropriate consent mode integrations.
Use the IAB Global Privacy Platform if:
You need to comply with US state privacy laws, such as CPA, CPA, CTDPA, UCPA, VCDPA
You work with vendors, advertising partners, ad exchanges that require GPP or US Privacy signals
You serve ads or collect data from users in multiple jurisdictions (e.g., EU, UK, US, Brazil, Canada)
You need a single framework to manage and transmit regional privacy strings (e.g., GDPR, CCPA, US National)
You want CookieHub to manage opt-out signaling automatically
If you do not work with vendors that require GPP signaling, you can use CookieHub’s regional consent options instead for simplified category-based consent.
Use our free scanner to detect all active services on your website. Receive a detailed report outlining their types, purposes, and durations to support your privacy compliance efforts.
The IAB Global Privacy Platform (GPP) is an industry-standard framework developed by the Interactive Advertising Bureau (IAB) to simplify and standardize the transmission of user privacy and consent signals across multiple global jurisdictions.
Prioritizing IAB GPP compliance in your consent management posture helps you:
Standardize privacy signaling globally
Provide a consistent, machine-readable format for collecting and communicating user privacy preferences across multiple frameworks, such as GDPR, CCPA, LGPD, and more.
Promote transparency
Empower users to make informed decisions about data processing and advertising preferences, with clear disclosures about which frameworks apply to them.
Facilitate better communication
IAB GPP provides a unified mechanism for websites and apps to transmit user consent and privacy choices consistently to ad vendors and technology partners.
It’s easy to enable IAB GPP in CookieHub. With CookieHub CMP, you can meet IAB GPP standards and adapt easily as global privacy frameworks evolve, delivering clear and consistent privacy choices to users.
What CookieHub provides:
Out-of-the box GPP support:
Privacy management ready to use immediately offering vendor alignment and automated opt-out signaling
Transparent options:
Offer users standardized, structured choices per framework and clear information about who processes their data and why
Ongoing compliance updates:
Stay current with evolving global privacy frameworks (GDPR, CCPA, CPRA, US state laws, and more)
CookieHub helps you display relevant privacy disclosures and vendor information depending on users’ regional frameworks.
Store and transmit user choices in standardized IAB GPP strings that can be shared across global ad and data ecosystems.
Ensure that users’ privacy and consent preferences are respected and communicated consistently to all participating vendors.
Connect CookieHub to your site to collect and share consent signals under the IAB Global Privacy Platform (GPP). Ensure your ad partners, analytics, and CMP integrations stay fully compliant across regions without losing valuable insights.
The IAB Global Privacy Platform (GPP) is a technical standard that enables publishers, advertisers, and technology partners to collect, manage, and share user privacy and consent signals in a consistent, interoperable format across global privacy frameworks such as GDPR, CCPA, and others. It is particularly relevant for US-based data privacy laws.
With privacy regulations expanding worldwide, the IAB developed the GPP to replace fragmented, region-specific consent frameworks. It provides a unified way to represent privacy choices, reducing complexity for publishers and vendors operating across multiple jurisdictions. The GPP defines how websites collect, store, and communicate user privacy preferences to vendors, ensuring those vendors process personal data only under valid legal bases and within the applicable framework’s boundaries. It informs users about: Why their data is being used (purposes) Which vendors and frameworks apply What data is collected How long it’s retained All privacy and consent choices are standardized, structured, and transmitted in a single machine-readable GPP string.
When GPP is enabled for a region, CookieHub: Displays the appropriate GPP section(s) based on regional rules (e.g., GDPR, CCPA, or US specific) Retrieves the latest framework definitions and vendor lists Allows users to accept or reject specific purposes, disclosures, or vendors Generates a GPP string containing user preferences and legal bases Stores and transmits that string to participating vendors via the IAB GPP API Each GPP string includes: Applicable regional section IDs Consent and opt-out preferences per framework User and vendor-level privacy choices
While not legally mandatory, GPP is often required by major ad platforms and vendors for consistent privacy signaling. For example, Google and other ad tech providers now support or require IAB GPP strings to ensure global compliance and interoperability.
Use the IAB Global Privacy Platform if: You serve users in multiple jurisdictions with differing privacy laws, especially relevant in the fragmented data privacy space of the US. You need to transmit structured privacy strings to multiple ad tech partners Your advertising vendors or header bidding providers require IAB GPP support
IAB GPP helps maintain compliance while supporting data-driven advertising efficiency: Preserve measurement: Even when users opt out, GPP’s standardized privacy strings allow consistent handling of consent signals, reducing attribution loss. Improve ad tracking: When users grant consent, vendors can process privacy strings to enable compliant tracking, remarketing, and conversion measurement. Optimize within compliance: Consent-based data enables platforms to refine ad delivery and performance ethically. Compliance + performance balance: CookieHub’s GPP integration provides structured privacy signaling so you stay compliant without losing essential analytics or advertising data.
Go to Dashboard → Domain list Click on the domain you want to configure Click Settings Under Regional settings: Set the framework to IAB GPP Choose your desired consent type (Explicit consent / Opt-in) Save your changes The GPP interface will appear automatically for users in the selected regions, and privacy strings will be generated and shared with vendors.
The IAB GPP is designed to unify consent and privacy signaling across major global privacy laws, including: GDPR (EU/UK): Governs data processing and consent for personal data. CCPA/CPRA (California): Defines consumer rights, opt-outs, and data sharing rules. US National & State Frameworks: Supports emerging laws in Virginia, Colorado, Connecticut, and more. LGPD (Brazil): Addresses lawful processing of personal data in Brazil. Other international frameworks: Including PIPEDA (Canada) and upcoming APAC regulations.
Using IAB GPP with CookieHub supports GDPR compliance and helps align your consent practices globally. The framework standardizes how consent and privacy signals are formatted and transmitted, but complete GDPR compliance still requires: Transparent privacy notices Purpose limitation and data minimization Mechanisms to withdraw consent Proper documentation and accountability CookieHub’s GPP integration ensures privacy signals are structured and communicated correctly, a foundational step toward full compliance across multiple privacy laws.