The term “cookie banner” refers to a banner or splash page deployed on a website to inform visitors that the website uses cookies. Most cookie banners fall within three categories:

1. Notice Only. A “notice only” cookie banner discloses to visitors that the website deploys cookies, but does not give the website visitor any direct control concerning the use of cookies. In other words, the website visitor is not asked to permit / accept cookies, nor are they given a tool or mechanism for disabling cookies. Some notice-only cookie banners may, however, provide information to the visitor on how cookies can be disabled within the visitor’s website browser.

2. Notice + Opt Out Consent. A “notice + opt out” cookie banner discloses to visitors that the website deploys cookies and provides the visitor with a mechanism for disabling the use of cookies on the website in the future. This may include a single option to “opt-out” of all cookies, or might provide a more granular option to opt-out of some types of cookies (e.g., behavioral advertising cookies) but no option with regard to other cookies (e.g., cookies necessary for the website to function).

3. Notice + Opt In Consent. A “notice + opt in consent” cookie banner discloses to consumers that the website would like deploy cookies and asks the visitor to opt-in to the use of cookies before the cookies are deployed. This may include a single option to “opt in” to all cookies wherein no cookies will be placed on the browser absent consent, or it might provide a more granular option to opt-in to some types of cookies (e.g., behavioral advertising cookies), but no option with regard to other cookies (e.g., cookies necessary for the website to function).

In order to determine the rate of cookie banner deployment, BCLP reviewed the websites of each company listed on the Fortune 500.1 BCLP’s full analysis, which is available to firm clients, includes the rate of cookie banner deployment broken down by industry, the quantity of advertising cookies deployed between industries, and the number of companies that do, and do not, classify their use of advertising cookies as the “sale” of personal information.

The data shows that only 10.6% of Fortune 500 companies deploy a “notice + opt-in consent” cookie banner.