Enabling GPC Recognition

GPC ScriptImplementation Steps

IRM GPC Implementation

The TrustArc GPC script can be accessed on the Publish page of any Intake Form simply by clicking the Global Privacy Control button.

The following are the steps for enabling GPC recognition on customer websites using IRM:

1

The script requires multiple inputs to govern the behavior of GPC recognition. One of the inputs is the Intake Form URL to be used upon recognizing GPC. In the IRM platform, under Admin > Forms, select the Intake Form you wish to use while recognizing GPC.

The recommended practice is to support only the Opt-out Request Type in this Intake Form and disable all forms of verification. However, customers can enable any type of verification or add any Request Types as desired.

2

From the Publish page of that Intake Form Builder, click the Global Privacy Control button to copy the code and embed it on your website.

Note: The IRM GPC script has been updated for better error handling. Error handling within the script now documents the error instead of passing it as the body of the host webpage. If you have previously implemented the IRM GPC script, update the following in the script:

FROM:

(error) => { document.body.innerHTML = error; document.body.style.color = 'red'; }

TO:

(error) => { console.error('[CPM Error]', error); }

If your embedded script works as expected, this will not be an issue. However, updating your current script is highly encouraged to prevent any future issues.

3

Under the r.irm.init section of the code, set gpcDetection: true, just below FormId:. You can view a sample usage by clicking the Global Privacy Control button on the Publish page of the Intake Form.

When gpcDetection is set to true, a banner will display whenever a GPC signal is detected on the consumer's browser, asking the consumer to submit an opt-out consent to propagate their GPC settings into TrustArc's customer's network.

4

If the consumer chooses to Ignore the opt-out notification, a trustarc_gpc_has_submitted_form cookie is dropped with an ignored value on the consumer's browser. This cookie is used to understand the consumer's previous behavior on their subsequent visits to the same website. You can verify the cookie settings by checking Application > Cookies in the browser's Inspect Element.

5

If the consumer chooses to Opt-Out, the Intake Form will load normally and upon submission, a trustarc_gpc_has_submitted_form cookie is dropped with a form-opened_submitted value.

Note: The Intake Form may not load properly if essential cookies in the consumer's browser are blocked. In this case, IRM shows a message to the consumer to enable third-party cookies in order to submit an Opt-Out DSR.

TrustArc  ·  Individual Rights Manager — GPC Implementation Guide  ·  www.trustarc.com