Question

A privacy engineer is reviewing a newly deployed consent banner for a European-facing website. The banner presents categories for 'Necessary,' 'Analytics,' and 'Marketing' cookies. The Analytics and Marketing toggles are switched ON by default, and non-necessary tags fire immediately when the page loads, before the user interacts with the banner. Which change should the engineer prioritize to align the implementation with privacy by default?

Accepted Answer

Set Analytics and Marketing toggles to OFF by default and block non-necessary tags from firing until the user provides affirmative consent

Answer

Add a prominent 'Reject All' button while keeping the toggles ON so users can opt out after the page loads

Answer

Retain the pre-selected toggles but log the user's IP and timestamp to prove consent was granted

Answer

Move the analytics and marketing tags to fire only after 30 seconds to give users time to close the banner