Handling Data Collection in Adobe Analytics When Cookies Are Declined

[KumarRishii]

If a user declines cookies, does Adobe Analytics still collect data? If yes, how does it happen, and if no, what actions are required to ensure compliance?

[Vinay_Chauhan · Accepted solution]

Hi @KumarRishii 

If a user declines cookies and your consent setup is working correctly (like using Adobe’s Opt-in framework or something like OneTrust or TrustArc), then Adobe Analytics shouldn’t collect any personal or trackable data. That means no ECID, no tracking cookies, and no hits should be sent.

So, if tracking calls are firing before the user makes a choice or if the consent logic isn’t hooked up properly, some data might still slip through, which could be a compliance issue (big legal issue).

Safest way is to -

• Make sure tracking only runs after consent is given

• Use Adobe’s built-in consent controls or integrate your CMP

• Test it in incognito mode and with debugger tools to be sure nothing’s being set too early

Sometimes, I also use an chrome extension called 'tag explorer', help me understand which scripts load after the consent.

Hope that helps!

[pradnya_balvir]

Hi @KumarRishii , I'm aligned with Vinay's response here.

By default: No, Adobe Analytics does not collect data if a user declines cookies and your implementation is configured correctly to respect that choice.

However, the answer depends on how you have implemented consent management and whether you're using a Consent Management Platform (CMP) integrated with Adobe Analytics.

• Adobe Analytics uses cookies (e.g., s_vi, AMCV_, etc.) to identify users and sessions.

• If a user declines tracking cookies, the browser blocks or doesn't set these cookies.

• When no cookies are allowed:

  • No persistent visitor ID is stored

  • Hit data may not be sent at all, depending on how Adobe Analytics is initialized

  • If tracking fires without consent, Adobe considers this a compliance risk and data collection should be suppressed

To ensure you're fully compliant with privacy regulations:

1. Implement a Consent Management Platform (CMP) 
   • Use a CMP that allows you to ask for consent before Adobe Analytics loads.
   • The CMP should delay Adobe Analytics firing until consent is given.
   • Adobe recommends integrating with the Adobe Opt-in API or OneTrust, TrustArc, etc.

2. Use Adobe's Opt-In Service (recommended)

   • Adobe provides a client-side library to manage opt-in status

     adobe.optIn.approve(['analytics']);
     adobe.optIn.deny(['analytics']);
     

   • Based on user response, you control whether Analytics should run.

   • Until consent is given, data collection should be blocked at the SDK level.

3. Tag Management (Launch or GTM)

   • Configure Adobe Analytics to only fire after consent is confirmed.

   • In Adobe Launch, use the Consent Condition extension or fire the rule only if consent is "true"