Consent Management Platform (CMP)

Definition

Software that helps businesses collect, manage, and store user consent for data processing activities. A CMP typically provides cookie consent banners, preference centers, and records of consent for compliance with privacy laws. It acts as the bridge between user preferences and the technical implementation of those choices.

Legal Definition

While no state law specifically defines "consent management platform," CMPs are the practical tool businesses use to fulfill consent requirements under laws like the CPRA (Cal. Civ. Code 1798.135) requiring "Do Not Sell or Share" links and the ability to process universal opt-out signals.

State Laws Using This Term

Practical Example

A website uses a CMP like OneTrust or Termly to display a cookie consent banner. When a visitor clicks "Reject All," the CMP blocks analytics and advertising scripts from loading and records the visitor's preference for future visits.

Related Terms

Frequently Asked Questions

Do I need a CMP to comply with state privacy laws?

A CMP is not legally required, but it is strongly recommended. Manually managing consent across multiple state laws is extremely difficult. CMPs automate cookie scanning, consent collection, preference storage, and opt-out signal processing.