Question

A privacy engineer is designing a new customer-facing web application. The marketing team wants embedded chat widgets, video players, and social share buttons on the landing page, all of which load third-party JavaScript that sets cookies and beacons before any user interaction. To align with privacy by default in the design lifecycle, what is the MOST appropriate technical approach?

Accepted Answer

Wrap third-party components in a consent-gated loader so their scripts and network calls execute only after the user grants the relevant purpose

Answer

Load all third-party components at page render but present a banner allowing users to opt out of tracking afterward

Answer

Configure the corporate firewall to block outbound calls to known tracking domains for all sessions

Answer

Add the third-party domains to the site's privacy notice so users are informed the trackers are present