Consent Management at Airbnb - Building a Scalable Platform for GDPR Compliance

Explore the architecture and implementation of Airbnb's Consent Management Platform in this 13-minute conference talk from PEPR '24. Discover how Aziel Epilepsia and Fernando Rubio developed a data model and API to address GDPR/ePrivacy directive cookie consent challenges while supporting various consent scenarios. Learn about the platform's ability to programmatically model terms, describe impacted personas, and maintain audit logs for regulatory inquiries. Gain insights into the concepts, data model, and API surface that enable clients to determine consent prompts, present terms, and persist consent records. Examine how this scalable solution tackles explicit consent through Cookie Banners and implicit consent via Global Privacy Control (GPC), adapting to new user flows and regulatory requirements.