Check GPC for doNotSell (#1740)

* Check GPC for doNotSell * Created minor changeset * Add test to check GPC behaviour
guardian · Nov 7, 2024 · 3936b1c · 3936b1c
1 parent 549868d
commit 3936b1c
Show file tree

Hide file tree

Showing 6 changed files with 27 additions and 3 deletions.
diff --git a/.changeset/few-humans-lie.md b/.changeset/few-humans-lie.md
@@ -0,0 +1,5 @@
+---
+'@guardian/libs': minor
+---
+
+Checking for the Global Privacy Control setting in the user's browser for USNAT.
diff --git a/libs/@guardian/libs/src/consent-management-platform/types/usnat/index.ts b/libs/@guardian/libs/src/consent-management-platform/types/usnat/index.ts
@@ -10,6 +10,7 @@ type GppParsedSections = Record<
 	{
 		Version: number;
 		SaleOptOut: number;
+		Gpc: boolean;
 	}
 >;
 
@@ -20,4 +21,5 @@ export interface GPPData {
 	supportedAPIs: string[];
 	parsedSections: GppParsedSections;
 	signalStatus: GPPSignalStatus;
+	gpcEnabled: boolean;
 }
diff --git a/...rdian/libs/src/consent-management-platform/usnat/__fixtures__/api.getGPPData.canSell.json b/...rdian/libs/src/consent-management-platform/usnat/__fixtures__/api.getGPPData.canSell.json
@@ -7,7 +7,8 @@
 	"parsedSections": {
 		"usnatv1": {
 			"Version": 1,
-			"SaleOptOut": 2
+			"SaleOptOut": 2,
+			"Gpc": false
 		}
 	}
 }
diff --git a/...ian/libs/src/consent-management-platform/usnat/__fixtures__/api.getGPPData.doNotSell.json b/...ian/libs/src/consent-management-platform/usnat/__fixtures__/api.getGPPData.doNotSell.json
@@ -7,7 +7,8 @@
 	"parsedSections": {
 		"usnatv1": {
 			"Version": 1,
-			"SaleOptOut": 1
+			"SaleOptOut": 1,
+			"Gpc": false
 		}
 	}
 }
diff --git a/libs/@guardian/libs/src/consent-management-platform/usnat/getConsentState.test.js b/libs/@guardian/libs/src/consent-management-platform/usnat/getConsentState.test.js
@@ -25,6 +25,18 @@ describe('getConsentState', () => {
 		expect(doNotSell).toBe(true);
 	});
 
+	it('gets the gpp consent state correctly if it gpc is true - doNotSell is true', async () => {
+		let gpcEnabled = gppDataCanSell;
+		gpcEnabled.parsedSections.usnatv1.Gpc = true;
+
+		getGPPData.mockResolvedValue(gpcEnabled);
+
+		const { doNotSell } = await getConsentState();
+
+		expect(getGPPData).toHaveBeenCalledTimes(1);
+		expect(doNotSell).toBe(true);
+	});
+
 	it('gets the gpp consent state correctly if it fails - doNotSell is false', async () => {
 		getGPPData.mockResolvedValue(gppDataFail);
 

diff --git a/libs/@guardian/libs/src/consent-management-platform/usnat/getConsentState.ts b/libs/@guardian/libs/src/consent-management-platform/usnat/getConsentState.ts
@@ -8,8 +8,11 @@ export const getConsentState: () => Promise<USNATConsentState> = async () => {
 	const supportedAPIs = gppData.supportedAPIs[0]?.split(':')[1]; // E.G: '7:usnatv1', '8:uscav1'
 
 	if (supportedAPIs) {
-		doNotSell = gppData.parsedSections[supportedAPIs]?.SaleOptOut !== 2; // https://github.com/InteractiveAdvertisingBureau/Global-Privacy-Platform/blob/main/Sections/US-National/IAB%20Privacy%E2%80%99s%20National%20Privacy%20Technical%20Specification.md
 		//0 Not Applicable. SharingOptOutNotice value was not applicable or no notice was provided, 1 Opted Out, 2 Did Not Opt Out
+		doNotSell =
+			gppData.parsedSections[supportedAPIs]?.SaleOptOut !== 2 ||
+			gppData.parsedSections[supportedAPIs].Gpc;
+		// https://github.com/InteractiveAdvertisingBureau/Global-Privacy-Platform/blob/main/Sections/US-National/IAB%20Privacy%E2%80%99s%20National%20Privacy%20Technical%20Specification.md
 	}
 
 	return {