Setting up Cookie Banner Regions

In this article, we will walk you through the steps to configure your cookie banner regions.

Updated over a week ago

Jump to a Section:

Enzuzo's region settings allow you to configure the behaviour of the cookie banner based on geographical regions. In this article, we will go through the opt-in and opt-out options you might select based on your visitors' locations.


Selecting your Region Settings in Enzuzo

  • Opt-In: Users must take affirmative action like clicking an "Accept" or "Agree" button to allow the website to place cookies on their devices.

  • Opt-Out: By default, cookies are set and used unless the user takes action to refuse them.

  • Don't Show: This disables the cookie banner for that specific region. The default setting for the cookie banner is Worldwide.

How to Add a New Region

  1. From the region selection dropdown choose the Country or Region of choice

  2. Click Add button

  3. The Region will be added and the default setting will be Don't Show

  4. You can then configure the settings to your preferences

Worldwide Default Setting

If you don't want the cookie banner to display to every visitor around the world, we recommend keeping Worldwide set as Don't Show. If you add a new region, those regional settings will override the worldwide setting, and show based on your selections.

For example: If Worldwide is set to Don't Show, and EU is set to Opt-In, the cookie banner will only be visible to website visitors who are located in the European Union (GDPR). It won't show to visitors from other regions.


What is the difference between Opt-In and Opt-Out?

The difference between a cookie banner opt-in and opt-out relates to how users are given the choice to consent or reject the use of cookies on a website. Here's an explanation of each:

Opt-In

With an opt-in approach, the cookie banner typically appears when a user visits a website for the first time or after certain changes have been made to the website's privacy policy.

The banner presents information about the types of cookies used and their purposes. Users must take affirmative action like clicking an "Accept" or "Agree" button to allow the website to place cookies on their devices.

If users do not provide explicit consent, cookies will not be placed except for essential cookies necessary for basic functionality.

Opt-Out

An opt-out approach involves displaying a cookie banner that informs users about the use of cookies and provides them with the option to reject or disable certain types of cookies.

By default, cookies are set and used unless the user takes action to refuse them. This typically involves providing a "Reject" or "Manage Cookies" button on the cookie banner or a preference center where users can disable specific categories of cookies.

Users who take no action or simply close the banner will have cookies enabled by default.

When should I select Opt-In vs. Opt-Out?

The choice between opt-in and opt-out mechanisms depends on legal requirements and the website's approach to privacy and user consent. Some jurisdictions, such as the European Union under the General Data Protection Regulation (GDPR), mandate an opt-in model where explicit consent is required for non-essential cookies.

Other websites or regions may adopt an opt-out model, letting users manage their cookie preferences but setting cookies by default unless explicitly rejected. It's important for website owners to clearly communicate the implications of both options to their users and make sure they comply with privacy laws.


Opt-In and Opt-Out Rules for Prominent Privacy Laws

The opt-in and opt-out rules for cookies and privacy laws vary depending on the jurisdiction. Here is a general overview of the rules under some prominent privacy laws:

Opt-In Laws

General Data Protection Regulation (GDPR) - European Union

  • Opt-In: The GDPR generally requires obtaining the user's explicit consent (opt-in) for non-essential cookies and similar tracking technologies. Consent must be freely given, specific, informed, and provided through clear affirmative action.

  • Opt-Out: For essential cookies that are necessary for the website's basic functionality, consent is not required. Users can configure their browser settings to block or delete non-essential cookies.

ePrivacy Directive (Cookie Law) - European Union

  • Opt-In: The ePrivacy Directive supplements the GDPR specifically concerning electronic communications and sets rules for the use of cookies. It requires obtaining the user's informed consent (opt-in) before placing non-essential cookies unless they qualify for an exemption.

  • Opt-Out: Essential cookies are exempt from the requirement of consent. Users can configure their browser settings to block or delete non-essential cookies.

Opt-Out Laws

California Consumer Privacy Act (CCPA) - United States:

  • Opt-In: The CCPA does not explicitly require opt-in consent for cookies. However, it mandates that businesses provide clear and conspicuous notices to consumers about the collection and use of their personal information, including information about cookies.

  • Opt-Out: The CCPA grants California residents the right to opt out of the sale of their personal information. If cookies are used for targeted advertising or sold to third parties, businesses must provide an opt-out mechanism, such as a "Do Not Sell My Personal Information" link.

General Personal Data Protection Law (LGPD) - Brazil:

  • Opt-In: LGPD does not require companies to obtain specific consent for the use of cookies. However, it does require companies to obtain individuals' free, informed, and unequivocal consent for the processing of their personal data.

  • Opt-Out: LGPD grants individuals the right to request the deletion of their personal data, which could include data collected through cookies. Individuals also have the right to revoke their consent to the processing of personal data at any time.

Not Explicitly Defined

Personal Information Protection and Electronic Documents Act (PIPEDA) - Canada:

  • Opt-In: PIPEDA does not have an explicit requirement for obtaining consent for cookies, but it emphasizes that consent must be obtained through clear and understandable language. You should make sure that the individual understands what information is being collected, how it will be used, and what their choices are with regard to this collection.

  • Opt-Out: PIPEDA does not specifically address opt-out requirements for cookies. However, it recognizes individuals' right to withdraw their consent to the collection, use, and disclosure of their personal information, which may apply to cookies as well.

Did this answer your question?