Loading auth config...
Skip to main content
Lokker
A visual representation of privacy and consent management, featuring icons such as locks for security, shields for protection, checkmarks for compliance with GDPR and CCPA, arrows indicating data flow, and cookies/pixels symbolizing tracking technologies.

Getting Started with OneTrust

Table of Contents​

Overview​

This guide walks you through the initial setup and configuration of OneTrust consent management on your website. We'll cover the essential steps to get OneTrust working properly from day one.

Prequisites​

Before you begin, ensure you have:

  • OneTrust account and access to the admin panel
  • Access to your website's HTML code
  • Understanding of your current cookie and tracking setup
  • Knowledge of applicable privacy regulations (GDPR, CCPA, etc.)

Step 1: OneTrust Account Setup​

1.1 Create Your OneTrust Account​

  1. Sign Up for OneTrust

    • Visit OneTrust.com
    • Choose the appropriate plan for your needs
    • Complete the registration process

  2. Verify Your Account

    • Check your email for verification
    • Set up your admin password
    • Complete your company profile

1.2 Initial Configuration​

  1. Company Information

    • Enter your company details
    • Set your primary domain
    • Choose your industry sector

  2. Privacy Regulations

    • Select applicable regulations (GDPR, CCPA, etc.)
    • Configure jurisdiction settings
    • Set up compliance requirements

Step 2: Domain Configuration​

2.1 Add Your Domain​

  1. Navigate to Domain Settings

    • Go to Admin → Settings → Domains
    • Click "Add Domain"
    • Enter your website domain (e.g., example.com)

  2. Domain Verification

    • Verify domain ownership
    • Set as primary domain if applicable
    • Configure subdomain handling

2.2 Environment Setup​

  1. Create Environments

    • Production environment
    • Staging environment (recommended)
    • Development environment

  2. Environment Configuration

    • Set appropriate settings for each environment
    • Configure testing domains
    • Set up environment-specific scripts

  1. Default Categories

    • Necessary/Strictly Necessary: Essential for site function
    • Analytics/Performance: Website analytics and performance
    • Marketing/Advertising: Marketing and advertising cookies
    • Functionality: Enhanced functionality cookies
    • Personalization: Personalization and preferences

  2. Custom Categories

    • Create additional categories if need
    • Ensure categories align with your business needs
    • Follow privacy regulation requirements

  1. Scan Your Website

    • Use OneTrust's cookie scanning tool
    • Identify all cookies on your site
    • Categorize cookies appropriately

  2. Manual Cookie Addition

    • Add cookies that weren't detected
    • Set appropriate categories
    • Configure cookie purposes

4.1 Banner Design​

  1. Visual Customization

    • Choose banner template
    • Customize colors and fonts
    • Add your company logo
    • Ensure mobile responsiveness

  2. Content Configuration

    • Write clear, compliant language
    • Include all required information
    • Set appropriate language options
    • Configure accessibility features

4.2 Banner Behavior​

  1. Display Settings

    • Set banner position (top/bottom)
    • Configure auto-hide behavior
    • Set banner timing
    • Configure mobile behavior

  2. User Experience

    • Set default consent state
    • Configure consent options
    • Set up preference center
    • Configure consent renewal

Step 5: Script Blocking Configuration​

5.1 Enable Automatic Blocking​

  1. Script Management

    • Go to Scripts → Script Management
    • Enable "Automatic Script Blocking"
    • Configure blocking behavior

  2. Script Categorization

    • Categorize all scripts by purpose
    • Set blocking rules for each category
    • Configure necessary script exceptions

5.2 Blocking Rules​

  1. Category-Based Blocking

    • Set blocking rules for each cookie category
    • Configure analytics script blocking
    • Set up marketing script blocking
    • Configure functionality script blocking

  2. Advanced Blocking

    • Set up conditional blocking
    • Configure script dependencies
    • Set up fallback behaviors

Step 6: Privacy Signal Configuration​

6.1 Global Privacy Control (GPC)​

  1. Enable GPC Processing

    • Go to Settings → Privacy Signals
    • Enable "Process GPC Signals"
    • Configure default GPC behavior

  2. Category-Level GPC Settings

    • Configure each category to respect GPC
    • Set appropriate actions for each category
    • Test GPC signal handling

6.2 Do Not Track (DNT)​

  1. Enable DNT Processing

    • Enable "Process DNT Signals"
    • Configure DNT behavior
    • Set up DNT response rules

  2. DNT Category Configuration

    • Configure each category for DNT
    • Set appropriate DNT actions
    • Test DNT signal handling

Step 7: Implementation​

7.1 Add OneTrust Script​

  1. Script Tag

    <script src="https://cdn.cookielaw.org/consent/[YOUR-SCRIPT-ID]/otSDKStub.js" 
            type="text/javascript" 
            charset="UTF-8" 
            data-domain-script="[YOUR-SCRIPT-ID]"></script>

  2. Script Placement

    • Place in <head> section
    • Ensure it loads before other scripts
    • Avoid conflicts with existing code

7.2 Test Implementation​

  1. Basic Functionality

    • Verify banner appears
    • Test consent collection
    • Verify script blocking
    • Test consent saving

  2. Advanced Testing

    • Test privacy signal handling
    • Verify category blocking
    • Test mobile experience
    • Verify accessibility

Step 8: Testing and Validation​

8.1 Functional Testing​

  1. Consent Flow Testing

    • Test banner appearance
    • Test consent acceptance
    • Test consent rejection
    • Test preference changes

  2. Script Blocking Testing

    • Verify scripts block without consent
    • Verify scripts load with consent
    • Test category-specific blocking
    • Verify privacy signal respect

8.2 Compliance Testing​

  1. Regulatory Compliance

    • Verify GDPR compliance
    • Verify CCPA compliance
    • Check other applicable regulations
    • Validate consent language

  2. Technical Compliance

    • Verify cookie categorization
    • Check script blocking effectiveness
    • Validate privacy signal handling
    • Test consent persistence

Step 9: Go Live​

9.1 Final Checks​

  1. Production Readiness

    • Verify all settings are correct
    • Test in production environment
    • Verify domain configuration
    • Check script loading

  2. User Communication

    • Inform users about new privacy controls
    • Update privacy policy
    • Train support team
    • Monitor user feedback

9.2 Launch​

  1. Enable Production

    • Publish all changes
    • Verify production settings
    • Monitor for issues
    • Collect user feedback

  2. Post-Launch Monitoring

    • Monitor consent rates
    • Track user interactions
    • Monitor for technical issues
    • Collect compliance data

Common Setup Issues​

Issue 1: Banner Not Appearing​

Cause: Script not loaded or domain not configured Solution: Check script placement and domain configuration

Issue 2: Scripts Not Blocking​

Cause: Automatic blocking not enabled Solution: Enable automatic script blocking in OneTrust admin

Cause: Storage configuration issues Solution: Check browser storage settings and OneTrust configuration

Issue 4: Privacy Signals Not Working​

Cause: Signals not enabled or configured Solution: Enable and configure privacy signal handling

Best Practices​

1. Start Simple​

  • Begin with basic functionality
  • Add advanced features gradually
  • Test thoroughly at each step

2. Document Everything​

  • Keep detailed configuration notes
  • Document custom implementations
  • Maintain change logs
  • Share knowledge with team

3. Test Thoroughly​

  • Test in multiple browsers
  • Test on mobile devices
  • Test with privacy tools
  • Validate compliance requirements

4. Monitor Performance​

  • Track page load impact
  • Monitor consent rates
  • Watch for user feedback
  • Monitor compliance metrics

Next Steps​

After completing the initial setup:

  1. Advanced Configuration

    • Customize banner appearance
    • Configure advanced blocking rules
    • Set up custom consent flows

  2. Integration

    • Connect with Google Tag Manager
    • Integrate with analytics tools
    • Set up custom implementations

  3. Optimization

    • Optimize consent rates
    • Improve user experience
    • Enhance compliance features

Need help with setup? Start with the Common Issues guide if you encounter problems, or refer to the specific topic guides for detailed information.