Question

A privacy engineer is reviewing a new marketing landing page before launch. The page embeds a third-party advertising pixel that begins firing and transmitting a hashed email and page-visit data to the ad network as soon as the page loads, before any user interaction. The consent banner is present but non-blocking. Applying privacy by default, what is the MOST appropriate technical remediation?

Accepted Answer

Configure the pixel to load only after the user affirmatively opts in through the consent mechanism, keeping it suppressed by default

Answer

Leave the pixel firing on load but add a link to the privacy policy explaining the tracking that occurs

Answer

Continue transmitting the data but salt the hashed email so it cannot be reversed by the ad network

Answer

Move the pixel to fire on page exit rather than page load to reduce the amount of data collected