CookieHub Logo

IAB Global Privacy Protocol framework

Comply with evolving data privacy regulations, such as CCPA, other US state-based privacy regulations, as well as other regional laws by adopting a standardized approach to collecting, managing, and transmitting user privacy and consent data in advertising. 

Of particular relevance to digital publishers and advertisers, the IAB Global Privacy Platform (GPP) enables unified consent signaling across jurisdictions, ensuring transparency and user control.

Trusted and used by 30.000+ websites and companies worldwide.

monday.comSemrushDealfrontTixly

Compliance Checker

Use our free scanner to detect all active services on your website. Receive a detailed report outlining their types, purposes, and durations to support your privacy compliance efforts.

Why IAB GPP compliance matters

The IAB Global Privacy Platform (GPP) is an industry-standard framework developed by the Interactive Advertising Bureau (IAB) to simplify and standardize the transmission of user privacy and consent signals across multiple global jurisdictions. 

Prioritizing IAB GPP compliance in your consent management posture helps you:  

Standardize privacy signaling globally 

Provide a consistent, machine-readable format for collecting and communicating user privacy preferences across multiple frameworks, such as GDPR, CCPA, LGPD, and more. 

Promote transparency 

Empower users to make informed decisions about data processing and advertising preferences, with clear disclosures about which frameworks apply to them. 

Facilitate better communication 

IAB GPP provides a unified mechanism for websites and apps to transmit user consent and privacy choices consistently to ad vendors and technology partners. 

Enable IAB GPP in CookieHub

It’s easy to enable IAB GPP in CookieHub. With CookieHub CMP, you can meet IAB GPP standards and adapt easily as global privacy frameworks evolve, delivering clear and consistent privacy choices to users. 

What CookieHub provides:

Out-of-the box GPP support:

Privacy management ready to use immediately offering vendor alignment and automated opt-out signaling

Transparent options:

Offer users standardized, structured choices per framework and clear information about who processes their data and why

Ongoing compliance updates:

Stay current with evolving global privacy frameworks (GDPR, CCPA, CPRA, US state laws, and more)

CookieHub CMP solution benefits

Maximize transparency, stay compliant with CookieHub and IAB GPP

Connect CookieHub to your site to collect and share consent signals under the IAB Global Privacy Platform (GPP). Ensure your ad partners, analytics, and CMP integrations stay fully compliant across regions without losing valuable insights.

FAQ about IAB GPP

The IAB Global Privacy Platform (GPP) is a technical standard that enables publishers, advertisers, and technology partners to collect, manage, and share user privacy and consent signals in a consistent, interoperable format across global privacy frameworks such as GDPR, CCPA, and others. It is particularly relevant for US-based data privacy laws.

With privacy regulations expanding worldwide, the IAB developed the GPP to replace fragmented, region-specific consent frameworks. It provides a unified way to represent privacy choices, reducing complexity for publishers and vendors operating across multiple jurisdictions.  The GPP defines how websites collect, store, and communicate user privacy preferences to vendors, ensuring those vendors process personal data only under valid legal bases and within the applicable framework’s boundaries.  It informs users about:  Why their data is being used (purposes)  Which vendors and frameworks apply  What data is collected  How long it’s retained  All privacy and consent choices are standardized, structured, and transmitted in a single machine-readable GPP string.

When GPP is enabled for a region, CookieHub:  Displays the appropriate GPP section(s) based on regional rules (e.g., GDPR, CCPA, or US specific)  Retrieves the latest framework definitions and vendor lists  Allows users to accept or reject specific purposes, disclosures, or vendors  Generates a GPP string containing user preferences and legal bases  Stores and transmits that string to participating vendors via the IAB GPP API  Each GPP string includes:  Applicable regional section IDs  Consent and opt-out preferences per framework  User and vendor-level privacy choices

While not legally mandatory, GPP is often required by major ad platforms and vendors for consistent privacy signaling. For example, Google and other ad tech providers now support or require IAB GPP strings to ensure global compliance and interoperability.

Use the IAB Global Privacy Platform if:  You serve users in multiple jurisdictions with differing privacy laws, especially relevant in the fragmented data privacy space of the US.  You need to transmit structured privacy strings to multiple ad tech partners  Your advertising vendors or header bidding providers require IAB GPP support

IAB GPP helps maintain compliance while supporting data-driven advertising efficiency:  Preserve measurement: Even when users opt out, GPP’s standardized privacy strings allow consistent handling of consent signals, reducing attribution loss.  Improve ad tracking: When users grant consent, vendors can process privacy strings to enable compliant tracking, remarketing, and conversion measurement.  Optimize within compliance: Consent-based data enables platforms to refine ad delivery and performance ethically.  Compliance + performance balance: CookieHub’s GPP integration provides structured privacy signaling so you stay compliant without losing essential analytics or advertising data.

Go to Dashboard → Domain list  Click on the domain you want to configure  Click Settings  Under Regional settings:  Set the framework to IAB GPP Choose your desired consent type (Explicit consent / Opt-in)  Save your changes  The GPP interface will appear automatically for users in the selected regions, and privacy strings will be generated and shared with vendors.

The IAB GPP is designed to unify consent and privacy signaling across major global privacy laws, including:  GDPR (EU/UK): Governs data processing and consent for personal data.  CCPA/CPRA (California): Defines consumer rights, opt-outs, and data sharing rules.  US National & State Frameworks: Supports emerging laws in Virginia, Colorado, Connecticut, and more.  LGPD (Brazil): Addresses lawful processing of personal data in Brazil.  Other international frameworks: Including PIPEDA (Canada) and upcoming APAC regulations.

Using IAB GPP with CookieHub supports GDPR compliance and helps align your consent practices globally.  The framework standardizes how consent and privacy signals are formatted and transmitted, but complete GDPR compliance still requires:  Transparent privacy notices  Purpose limitation and data minimization  Mechanisms to withdraw consent  Proper documentation and accountability  CookieHub’s GPP integration ensures privacy signals are structured and communicated correctly, a foundational step toward full compliance across multiple privacy laws.

©2025 CookieHub ehf.