Category: GDPR & Privacy Law

Session replay is legal — if it never runs before consent. The exact Hotjar and Microsoft Clarity settings, the GTM gating pattern, and how to verify nothing records pre-consent.

US state privacy laws 2026 now cover more than half the US population, yet most cookie banners are still configured as if only California exists. Virginia, Colorado, Connecticut, Utah, Texas,…

The CCPA vs CPRA 2026 gap is wider than most California businesses realise. CPRA — which amended CCPA and became fully enforceable in 2023 — introduced new rights and obligations…

TikTok Pixel consent mode is one of the least-documented compliance configurations in the paid-social stack — and one of the most consequential to get wrong. Unlike Google’s Consent Mode v2,…

Getting Meta Pixel GDPR consent right has never been more consequential. iOS 14’s App Tracking Transparency (ATT) framework gutted browser-side signal quality, GDPR enforcement of pixel deployments is intensifying, and…

In the first instalment of this series we reviewed the lower‑value fines imposed for cookie‑consent violations. The remaining cases involve significantly higher penalties and illustrate how regulators respond to persistent…

Digital cookies and trackers are essential for personalising services and measuring audience behaviour, but European privacy rules (in particular the EU e‑Privacy Directive and the General Data Protection Regulation (GDPR))…

In 2026, cookie compliance is no longer a theoretical or “best-practice” discussion. It is a litigation issue. Across Europe and the United States, regulators and courts are increasingly aligned on…

TL;DR: Modern retail sites often combine analytics telemetry with video playback signals (embedded players, CDNs, session replay, ad pixels). That combination can create GDPR exposure in the EU and VPPA-style…