Enabling GPC Recognition

The TrustArc GPC script can be accessed on the Publish page of any Intake Form simply by clicking the Global Privacy Control button. 

The following are the steps for enabling GPC recognition on customer websites using IRM:

1. The script to recognize GPC signals requires multiple inputs to govern the behavior of GPC recognition. One of the inputs is the Intake Form URL to be used upon recognizing GPC. In the IRM platform, under Admin > Forms, select the Intake Form you wish to use while recognizing GPC. Recommended practice is to support only Opt-out Request Type in this Intake Form and disable all forms of verification. However, customers can enable any type of verification or add any Request Types as desired.
   
    

2. From the Publish page of that Intake Form Builder, click the Global Privacy Control button to copy the code and embed it on your website.
   
   
   
   
    

   NOTE: IRM GPC script is updated for better error handling. Error handling within the script documents the error instead of passing the error as the body of the host webpage. If you have previously implemented the IRM GPC script, we recommend that you change the following in the script:
   
    

   FROM: 
   (error) => { document.body.innerHTML = error; document.body.style.color = 'red'; }

   
   TO:
   (error) => { console.error('[CPM Error]', error); }

   
   If your embedded script works as expected, this will not be an issue. However, we highly encourage you to update your current script to prevent any issues in the future.

3. Under the r.irm.init section of the code, the gpcDetection: true, the script should be set just below the FormId:. You can view a sample usage of this by clicking the Global Privacy Control button in the Publish page of the Intake Form.
   
   When gpcDetection is set to true, a banner will display whenever a GPC signal is detected on the consumer's browser, asking the consumer to submit an opt-out consent to propagate their GPC settings into TrustArc’s customer's network.
   
   
   
    
4. If the consumer chooses to Ignore the opt-out notification, a trustarc_gpc_has_submitted_form cookie is dropped with an ignored value on the consumer’s browser. This cookie is used to understand the consumer’s previous behavior on their subsequent visits to the same website. You can verify the cookie settings by checking the Application > Cookies menu of the browser’s Inspect Element.
   
   
   
    
5. If the consumer chooses to Opt-Out, the Intake Form will load normally and upon submission of the form, a trustarc_gpc_has_submitted_form cookie is dropped with a form-opened_submitted value.
   
   
   
   NOTE: The Intake Form may not load properly if the essential cookies in the consumer's browser are blocked. In this case, IRM shows a message to the consumer to enable the third party cookies to be able to submit an Opt-Out DSR.