28%
The term “cookie banner” refers to a banner, or splash page, deployed on a website to inform visitors that the website uses cookies. There is little standardization concerning how cookie banners are deployed. Different websites position them in different places on the screen (e.g., top bar, bottom bar, or centered splash page), utilize different language to describe what cookies are, and use different terms to describe the options available to visitors. Generally, however, most cookie banners fall within three categories:
1. Notice Only. A “notice only” cookie banner discloses to visitors that the website deploys cookies, but does not give the website visitor any direct control concerning the use of cookies. In other words, the website visitor is not asked to permit / accept cookies, nor are they given a tool or mechanism for disabling cookies. Some notice-only cookie banners may, however, provide information to the visitor on how cookies can be disabled within the visitor’s website browser.
2. Notice + Opt Out Consent. A “notice + opt out” cookie banner discloses to visitors that the website deploys cookies and provides the visitor with a mechanism for disabling the use of cookies on the website in the future. This may include a single option to “opt-out” of all cookies, or might provide a more granular option to opt-out of some types of cookies (e.g., behavioral advertising cookies) but no option with regard to other cookies (e.g., cookies necessary for the website to function).
3. Notice + Opt In Consent. A “notice + opt in consent” cookie banner discloses to consumers that the website would like deploy cookies and asks the visitor to opt-in to the use of cookies before the cookies are deployed. This may include a single option to “opt in” to all cookies wherein no cookies will be placed on the browser absent consent, or it might provide a more granular option to opt-in to some types of cookies (e.g., behavioral advertising cookies), but no option with regard to other cookies (e.g., cookies necessary for the website to function).
In order to determine the rate of cookie banner deployment, BCLP reviewed the websites of each company listed on the Fortune 500 and noted whether the website deployed a cookie banner.[1] BCLP’s full analysis, which is available to firm clients, includes the rate of cookie banner deployment broken down by industry, the quantity of advertising cookies deployed between industries, and benchmarking concerning when companies did, and did not, classify advertising cookies as the “sale” of personal information. The data shows that in total 28% of Fortune 500 companies deploy a notice only, notice + opt-out consent, or notice + opt-in consent cookie banner.
For more information and resources about the CCPA visit http://www.CCPA-info.com.
This article is part of a multi-part series published by BCLP to help companies understand and implement the General Data Protection Regulation, the California Consumer Privacy Act and other privacy statutes. You can find more information on the CCPA in BCLP’s California Consumer Privacy Act Practical Guide, and more information about the GDPR in the American Bar Association’s The EU GDPR: Answers to the Most Frequently Asked Questions.
1. Websites of each company were reviewed during the first quarter of 2020 from an IP address associated with Los Angeles, California, using Chrome for iOS Version 79.0.3945.88 (official build) (64 bit). Advertising cookies were identified using Ghostery for Chrome Version 8.4.4. In situations in which a Fortune 500 company was a holding company that did not operate a significant website, the website of one of the holding company’s operating units was examined.
[View source.]
