Tag Inspector Release Notes

The Tag Inspector August Release expands compliance capabilities by introducing explicit CMP coverage verification, granular consent condition auditing, and support for server-side Google Tag Manager containers. It also streamlines policy management with custom consent category mapping and dynamically updates reporting in real time without requiring new site audits.

Unique Consent Condition Auditing

Tag Inspector now supports the auditing of each individual consent condition available to a user on a website.

Verify consent behavior for tags loading when a user selects consent for “only performance”, “only strictly necessary”, etc. embedded within all Tag Inspector reporting.

Support to Audit Tags Loaded Through Server-side GTM

A user can now add an ssGTM configuration ID to a Site to be audited resulting in tags loading through the ssGTM container viewable in reporting and auditable for consent compliance.

Explicit Verification of Full CMP Coverage on a Site

A Consent Management Platform being present on all pages of a website is critical for effective consent compliance.

Tag Inspector now explicitly verifies and surfaces the status of CMP coverage in each single site audit report run for each Site in an account.

Dynamically Updating Aggregate Reporting

Violations reporting now dynamically updates following any change to tag categorization or modifications to a tag consent policy.

Understand the current state of compliance based upon the most recent audits run on each website in light of consent policy changes immediately without the need to run a new audit.

Custom Consent Category Mapping

Updates to support the automatic mapping of account-level tag categorization down to policy-level standards.

Allows for automatic mapping to simplify the policy definition process and customization based upon jurisdiction-level requirements.

Light Mode in Reporting

Tag Inspector’s user interface is now customizable between light and dark mode, with defaults following the defaults set in the user’s operating system.

This release expands Tag Inspector’s audit capabilities with no-code authentication recording for scanning behind logins, journey recording for multi-step user paths, and single-site audit reports for maintaining a defensible consent compliance record. Operational improvements include bulk site upload via CSV for large website estates, PII exclusions to reduce false-positive violations, and enhanced visibility into piggybacking tag behavior for more accurate consent categorization. Role-based access controls and customizable password policies round out the release with expanded account administration options.

Audit Authenticated Sites

Tag Inspector now provides an intuitive, no-code, website authentication recording experience to make it easy to audit websites as an authenticated or logged-in user.

Bulk Site Upload

To easily onboard organizations with large website estates, Tag Inspector now supports intuitive bulk site uploading. An admin user can upload a CSV file containing multiple websites and use a visual validation experience to ensure all inputs are correct, make bulk modifications, and identify any errors to ensure all websites are onboarded successfully. 

The visual validation experience also allows users to export existing site configurations to make any updates necessary to the active Site scope.

Single Site Audit Report

Historical audit records and results for individual website audits are critical for an organization’s defensible position in consent compliance.

Single Site Audit Reports in Tag Inspector provide all the details for tags loading, cookies loading, and policy violations identified as uncovered in each website consent audit. Past audit records are available for all audits aligned to the account’s data retention schedule.

PII Exclusions

Define specific instances or types of PII to exclude from violations. A common example is PII violations for an address. If a page has the company address listed, it is possible to be collected by tags loading on the page. In these instances, the company address is not true PII and an exclusion can be added to preclude the address from identification as a PII violation.

PII Exclusions can be added both in-line from a false-positive violation as well as in a dedicated manner via a PII Exclusions overview page.

Enhanced Tag Load Behavior for Tag Categorization

A common challenge in defining a Tag Consent Policy is how to categorize and manage tags that are piggybacking, or injected by, other tags. Piggybacking tags are not directly controlled by an organization, so categorization and management of them is linked with the tags they load from (and inversely the tags they initiate in the case of the tag responsible for the piggybacking behavior).

Enhanced Tag Privacy Details bring this behavior to the foreground explicitly to assist with consent categorization of each tag identified across the websites of an organization.

Role Based Access Controls

Admin settings now allow for user invitations to an account, customized password policies for an account, and role based-access for users at both the account and individual groups levels.