GDPR, ePrivacy and CCPA - Advice and Insights

Zero-Party vs First-Party Data: The Differences and Why It Matters for Consent

Zero-party data is intentionally shared by customers, e.g., preferences or quizzes, while first-party data is gathered directly from interactions and includes...

How You Can Build a First-Party Data Strategy That Survives Consent Loss

A first-party data strategy sets out what customer data you collect, why you collect it, and how you use it. This guide walks through seven steps for mapping collection...

Personally Identifiable Information: Examples and Why PII Isn't the Same as Personal Data

PII is a term with no single definition in the U.S. Broadly, it refers to any information that can identify an individual either directly or indirectly.

Cookiebot's New Compact Banner: A Smaller Footprint for Opt-In Consent

Cookiebot has introduced a new compact banner layout that takes less screen space than the standard cookie consent banner. Built for site owners who want a lighter...

Introducing the Cookiebot Configuration Health Checker: Find Setup Gaps Before They Become Problems

Cookiebot™ has introduced a self-service Configuration Health Checker, available in the Cookiebot Admin. Now in Beta, it scans...

IAB TCF Explained For Your Website In 2026

IAB TCF v2.4 has an implementation deadline of October 23, 2026 for websites. This guide shows what IAB TCF is, what’s new in the upcoming version compared to previous ones, and what you as a website operator can do today to introduce IAB TCF...

Iowa Consumer Data Protection Act (ICDPA): Overview of Rights, Requirements, and Compliance Actions

Iowa's Consumer Data Protection Act (ICDPA) has applied since January 2025 to any organization processing the personal...

Third-Party Tracking: What It Is, Who Is Liable, and How to Control It

Third-party tracking helps website owners collect data for effective marketing campaigns, but its methods may raise ethical questions, browser and compliance...

Delaware Personal Data Privacy Act (DPDPA): What Businesses Need to Know

The Delaware Personal Data Privacy Act (DPDPA) took effect January 1, 2025, giving Delaware's one million residents broad rights over their personal data.

What Cookies Does My Website Use? Three Ways to Find Out (and Why Only One Is Reliable)

A comparison of three methods for auditing a website's cookies (browser DevTools, automated scanning, and manual audit) and why only an automated scan reliably...

Free Cookie Policy Template (and How to Fill It in Correctly)

There’s more to a cookie policy than filling in a template and hitting publish. Copy our cookie policy template, learn which details need to come from your website, and see how to keep them accurate...

What Your GDPR Cookie Banner Needs to Hold Up Under Scrutiny

There are five key elements that help cookie banners hold up under the GDPR: blocking scripts before consent, equal-weight buttons, granular category choices, easy withdrawal, and audit-ready...

How to Achieve Multi-Regulation Privacy Compliance With Cookie Consent Banner Geotargeting

One standard cookie banner can't satisfy multiple data privacy regulations. Learn how geotargeting delivers the right...

Florida Digital Bill of Rights (FDBR) — an overview

The Florida Digital Bill of Rights (FDBR) protects Florida residents’ data privacy, with a particular focus on large tech platforms to regulate social media use and protect children.

How to Evaluate GDPR Compliance Solutions for SMBs

GDPR software falls into three categories, and most small businesses only need one of them. Here's how to tell the different types of tools apart, which six features to look for in an SMB solution, and a...

Consent Lifecycle Management: What to Automate (and What to Track Yourself)

Consent lifecycle management covers seven stages, not just the consent banner. This guide covers what each stage involves, what's worth automating, and what a clean,...

Best WordPress Cookie Consent Plugins in 2026 (Ranked and Compared)

A ranked, criteria-based comparison of ten WordPress cookie consent plugins for 2026, covering free-tier depth, prior blocking, and Google Consent Mode v2 support.

How to Automate Data Privacy Compliance (and What You Cannot Automate)

Data privacy compliance automation can reduce repetitive work and help teams keep pace with changes across their websites. The key is knowing what software can...

How Do I Write a Privacy Policy for My Website?

A practical guide to drafting, structuring, and maintaining a privacy policy using a 12-step framework, with guidance on automation, governance, and mobile app requirements.

How to Build a Data Privacy Compliance Framework That Scales

A data privacy compliance framework helps you turn privacy requirements into processes you can manage.You can adopt as your website and legal obligations change. Learn how to build and maintain a data...

Shopify & GDPR Compliance: Your Ultimate Guide

Running a Shopify store involves collecting customer data. However, stores with customers from the European Union need to follow the rules under the General Data Protection Regulation (GDPR). This...

Google Tag Manager and Cookie Consent: How to Wire It Up Correctly

Google Tag Manager (GTM) doesn’t control cookies directly but lets website owners and marketers orchestrate their behavior based on cookie consent preferences from website visitors. This guide explains how...

GDPR Compliance for Small Businesses: What To Do (and What Can Wait)

GDPR has a reputation for being complicated, especially if you run a small business. Read a few articles, and it can seem like every website needs legal...

GDPR Compliance Software for Small Business: What to Buy

GDPR compliance for a small business can feel complex. However, that doesn’t mean SMBs need to invest in costly software that automates everything. Discover what you can manage manually and what’s easiest...

How to Become GDPR-Compliant: Guide for Website Owners

This is the practical guide for website owners looking to achieve GDPR compliance, using Cookiebot by Usercentrics automation tools alongside organization-level improvements. It walks through...

Cookie Consent Plugin for WordPress: How to Set It Up and Avoid Common Mistakes

Installing a cookie consent plugin on WordPress is simple, but that doesn’t mean everything is working as it should. Tracking can come from places your banner...

What Are the GDPR Principles (And Why They Matter for Your Website)

Understand the 7 GDPR principles from Article 5 and how they apply specifically to websites, cookies, and consent management. This guide focuses on practical implementation to help you...

What Are Third-Party Cookies? How They Work and What Happens Next

A third-party cookie is a browser cookie set by a company other than the owner of the website a visitor is browsing. It usually comes from an external service you've chosen to add to your site, such as...

UK Data (Use and Access) Act 2025: A Practical Guide for Website Owners

This guide walks website owners through the UK Data (Use and Access) Act 2025 (DUAA), now fully in force. Covers the five new cookie consent exemptions, updated lawful bases, and the ICO's...

Do U.S. Privacy Laws Apply to Your Website?

With close to 20 U.S. states now enforcing their own consumer privacy laws, and several more already enacted and awaiting their effective dates, understanding whether these rules reach your website is essential for any business with American...

Google EU User Consent Policy Audit Checklist

A step-by-step guide to responding to a Google EU User Consent Policy audit, covering all eight issue categories, how to fix them, and how to close the loop with Google. Google periodically runs a Google EU User Consent Policy audit on...

GDPR for AI Training Data: Legal Bases and Compliance Checklist

Whether it’s public or proprietary, the customer data you use to train AI tools falls under the scope of the GDPR. This guide covers the legal bases for training data and provides a checklist to work...

How to Set Up a Compliant Shopify Cookie Banner

Shopify sets cookies the moment a visitor lands, and its built-in banner only controls the platform's own tracking. Learn how cookie consent works on Shopify, where the native tools stop, and how to...

Cookiebot by Usercentrics Maintains Gold Status as a Google CMP Partner for 2026

Cookiebot by Usercentrics CMP maintains Gold Tier CMP Partner status. As Google Tag Gateway (GTG) adoption grows, Cookiebot by Usercentrics provides...

What Google Tag Gateway Means for Your Consent Setup

If you turned on Google Tag Gateway through your content delivery network (CDN), you wanted better ad measurement. Depending on how it's deployed, it can also change your script load order and...

Consent management for websites | Cookiebot CMP

GDPR Consent Management

The General Data Protection Regulation (GDPR) and ePrivacy Directive affect how you as a website owner must obtain and store cookie consents from your visitors from the EU. See how to meet data privacy regulation requirements with Cookiebot™ CMP

Connecticut Data Privacy Act (CTDPA): An Overview

The Connecticut Data Privacy Act (CTDPA), in effect since July 1, 2023, applies to companies processing personal data of 100,000+ Connecticut consumers annually, or 25,000+ consumers if deriving over 25 percent of revenue from data sales. The...

What is PII (Personally Identifiable Information)? Your Questions Answered

This FAQ answers common questions about personally identifiable information (PII), including what counts as PII, how it differs from personal data, and what makes...

Privacy by Design: 7 Principles, GDPR Requirements, and How to Implement It

Privacy by design means building data protection into products and systems from the start. This article covers GDPR Article 25 requirements, Ann Cavoukian's...

Understanding Danish DPA Cookie Consent Guidelines

If you offer goods and services to Danish users or track their website activity using cookies, you need their explicit consent to do so. But what does explicit consent mean, and how can you obtain it?

WooCommerce and the GDPR: How to Support Privacy Compliance for Your Website

Is your WooCommerce store GDPR-compliant? Learn why store owners are legally responsible for data collected by plugins and tracking pixels. This guide explores...

EU AI Act Article 50: What to Do for Your Website

Article 50 of the EU AI Act requires deployer-facing transparency disclosures from August 2026, unaffected by the Digital Omnibus on AI, now in force as Regulation (EU) 2026/1744. This guide...

EU AI Act: A Compliance Support Guide for Websites

This guide helps website owners work out what the EU AI Act actually requires now that the Digital Omnibus is in force. It explains which Article 50 transparency duties apply from August 2026, which...

Illustration of a magnifying glass with some step marks, a compass and a location mark icon

Cookieless Tracking: What It Is, How It Works, and the Best Tools

This guide explains cookieless tracking: what it is, how it works, and why it matters as browser restrictions and privacy laws tighten in 2026. It compares...

Understanding WordPress Cookies to Support Privacy Compliance

If you use WordPress for your website, you need to know about cookies, how WordPress uses them, and how to manage them to help meet the requirements of laws like the GDPR and CCPA.

5 Cookie Banner Examples: Best Practices for GDPR Compliance and Design

Typically, brands judge a cookie banner on one thing: whether it gets visitors to click accept. But under the General Data Protection Regulation (GDPR), that's only...

What is global privacy control? What you need to know about GPC

What Is Global Privacy Control (GPC)? Definition, Legal Status, Other Opt-Out Signals, and How to Comply

Global Privacy Control (GPC) aims to provide individuals control and...

Google-Certified CMP: What the Requirement Means for Publishers and How to Comply

Since January 2024, publishers using Google AdSense, Ad Manager, or AdMob must implement a Google-certified CMP integrated with IAB Europe's TCF v2.3 to...

Understanding COPPA Compliance Requirements: A Guide to Safeguarding Children’s Online Privacy

The Children’s Online Privacy Protection Act (COPPA) protects children’s data and privacy in digital spaces, with...

What Is a DPA? Understanding Data Processing Agreements and Their Requirements For Data Controllers and Processors

Data processing agreements (DPA) are essential contracts that define how...

Québec Law 25: An Overview

Québec Law 25 is Canada's most stringent provincial privacy law, applying extraterritorially to any organization that handles the personal information of Québec residents. This article explains who must comply, what consent rules apply...

GDPR Compliance Checklist: Everything Your Organization Needs to Do

GDPR compliance is essential for safeguarding personal data and maintaining trust. This regulation sets strict standards for data protection and privacy,...

Legal Requirements for Websites: A Guide to Consent Banners and Compliance Requirements

Address three categories of legal requirements for your website: cookie consent, transparent privacy policies, and web accessibility (WCAG). This guide...

How to Create a GDPR-Compliant Consent Form

Cookie banners tend to dominate the conversation around GDPR compliance, but consent requirements extend far beyond just tracking technologies. Whenever a website asks users for permission to...

Cookiebot CMP: The First CMP with a Fully Localized Admin Interface

Most CMPs offer banner localization in multiple languages. Cookiebot CMP goes further, localizing its full Admin Interface, including the menus, reports,...

Google Signals Changed: What It Means for Your Consent Setup

On June 15, 2026, Google decoupled Google Signals from the advertising data flow into Google Ads, making Consent Mode ad_storage the only signal that matters for ad-related data. For website owners...

AI Data Privacy for Websites and Compliance Risks

Adding AI tools to a website has become routine. A chatbot here, a recommendation engine there, an analytics tool that promises deeper insights. What's easy to miss is that each of those tools starts...

How to Write a Privacy Policy in 12 Steps: Support GDPR and CCPA Compliance and More

A privacy policy is a legal requirement under the GDPR, CCPA, and most other major data protection laws. Getting it wrong can carry real consequences. This guide walks...

The Langley School builds a culture of data privacy with Cookiebot™ CMP

The Langley School, a K–8 institution in McLean, Virginia, implemented Cookiebot CMP to support COPPA and GDPR compliance while managing student and family data.

Illustration of a cookie banner with some security errors

Dark Patterns: What They Are and How to Avoid Them

This piece explains dark patterns, which include functions like hidden fees, pre-checked boxes, and needlessly complex cancellations. These manipulate visitors into choices they never intended. Drawing...

More consented data, better campaigns: how Evensen Marketing pushed Nunataq's opt-in rate from 50% to 73%

Evensen Marketing is a Norwegian freelance marketing agency specializing in Google Ads management, optimization, and...

Nebraska Data Privacy Act (NDPA): Requirements, Rights, and Compliance

The Nebraska Data Privacy Act (NDPA) applies to any business serving Nebraska residents, regardless of location or revenue. This guide covers scope, consumer...

Guide to CIPP Certification: What It Is and How To Get It

Data privacy is a fast-growing field, and CIPP certification is the credential professionals turn to for verified, jurisdiction-specific knowledge of privacy law. This guide covers what the...

10 Reasons CPPA Enforcement Is Getting Stronger and What Businesses Should Do

10 forces are converging to expand CalPrivacy's enforcement capacity at once. There’s a dedicated Audits Division, automated detection, DROP, a nine-state...

What Must a Privacy Policy Include? A Practical Guide

This guide explains what a privacy policy must include, how to structure it, and how to maintain it over time. It focuses on practical requirements, helping you create a compliant and user-friendly policy.

Illustration of three icons with PII, PI and a folder with a locker connected by dots

PII vs. Personal Data vs. Sensitive Data: Key Differences Explained

PII, personal data, and sensitive data are distinct legal categories with different compliance implications. PII identifies individuals directly or indirectly; personal data is broader, covering any...

What Are the GDPR Data Retention Requirements?

The GDPR's storage limitation principle requires retaining personal data only as long as necessary for its stated purpose, with no fixed timelines set by the regulation itself. The article covers how to determine appropriate retention periods...

What Is Regulatory Compliance Software And Do You Need It?

Regulatory compliance software helps you centralize legal requirements, automate tracking, and reduce risk. This guide explains how it works, when you need it, and how to choose the right solution.

What Is Pixel Tracking? How Tracking Pixels Work

Pixel tracking helps businesses measure digital marketing performance and understand user behavior across websites and campaigns. This guide explains how tracking pixels work, how they differ from cookies, and what privacy regulations...

Does GDPR Apply in the U.S.? What American Companies Need to Know

GDPR can apply to U.S. companies with no physical presence in Europe if they offer goods or services to EU individuals or monitor their online behavior, since the regulation is triggered by data subject...

Opt-In vs. Opt-Out Consent: Which Model Does Your Website Need?

Opt-in and opt-out consent models determine how websites collect and process personal data. This guide explains which model your website needs based on global privacy laws and how to implement...

CCPA vs CPRA: Understanding the Differences

The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) are foundational consumer privacy laws in the US that protect the personal information of California residents. For...

Black Friday readiness checklist

Every marketer knows the stress of Black Friday. Weeks of traffic surges and rising privacy demands often lead to last-minute fixes. Use our checklist to cut through the chaos with ten simple steps that help you stay ready and keep customers feeling...

Cookiebot CMP certified by Google as a Gold Tier CMP Partner

Cookiebot CMP has earned Google’s Gold Tier certification for CMP Partners. In addition to meeting Google’s stringent standards for CMP Partner certification, Cookiebot CMP has also met additional high...

Utah Consumer Privacy Act (UCPA): An Overview

The Utah Consumer Privacy Act (UCPA), in effect since December 31, 2023, is considered one of the more business-friendly U.S. state privacy laws, applying only to companies meeting both revenue and data-volume thresholds. The...

Usercentrics surpasses
100K paying B2B customers as demand for Privacy-Led Marketing soars

Usercentrics announced it has surpassed 100,000 paying B2B customers as brands adopt Privacy-Led Marketing strategies,...

Cookiebot response to the new German consent management regulatory ordinance

Usercentrics responds to Germany's September 2024 draft ordinance on Consent Management Services, welcoming efforts to reduce cookie banner fatigue while raising...

Data privacy vs data security: Key differences explained

Data privacy governs who has the right to access personal information and how it can be used, while data security defends that information against unauthorized access or theft. The article covers key principles...

What’s important to know about session cookies and the GDPR

Session cookies are temporary text files stored on your device by websites during your visit, enabling the site to remember information like login status or items in your shopping cart. They help maintain a...

Cookiebot CMP listed on Tekpon’s Top Compliance Software Tools of 2024

Cookiebot CMP has been listed on Tekpon’s list of Top Compliance Software Tools for 2024. Tekpon is a leading software aggregator platform run by enthusiastic tech lovers who most want to help users...

Microsoft UET Consent Mode: Ensuring Microsoft GDPR compliance in advertising

Microsoft UET Consent Mode ensures compliance with data privacy laws for businesses using Microsoft Ads. With Cookiebot CMP, companies can automate...

What you need to know about the GDPR’s data subject rights

Personal data is an integral part of nearly every online service and transaction. Websites, apps, and other connected platforms collect this data for companies to learn about user behaviors...

A complete PIPEDA compliance checklist and requirements

The Personal Information Protection and Electronic Documents Act (PIPEDA) is Canada's federal privacy law for businesses, governing how personal information is collected, used, and shared...

10 of the best CCPA compliance software compared

CCPA compliance software simplifies meeting the requirements of California's privacy laws by automating data management and consumer rights requests. This article provides a comparison of 10 solutions,...

Achieve privacy compliance with just a few clicks in the Google tag UI – certified CMP with consent mode

Easily implement Cookiebot CMP with just a few clicks from your Google Ads, Analytics, or Tag Manager account.

Google Consent Mode

Customizing cookie consent popups on Wix: tips and tricks

Having a well branded and user-friendly cookie consent popup can make all the difference for the consent rates on your website. We’ve rounded up our best recommendations to help you provide great...

Oregon Consumer Privacy Act – an overview

With the Oregon Consumer Privacy Act in effect since July 1, 2024, companies doing business in the state need to comply with its provisions regarding the processing of Oregon residents’ personal data.

A Comprehensive Guide to Mastering Your WordPress CCPA Privacy Policy

WordPress doesn't enforce compliance with specific privacy regulations like the CCPA, but if your site draws visitors from California, compliance is essential. This guide covers everything from crafting a...

What you need to know to comply with Google’s consent requirements in Switzerland

Unlock your compliance guide. Download the essential checklist for Google's EU user consent policy expansion into Switzerland.

How to create a comprehensive WordPress privacy policy

Creating a privacy policy for your WordPress website helps meet the transparency requirements of global data protection regulations and national authorities’ guidelines and builds trust...

Wix GDPR Compliance: How to Make Your Wix Website Compliant

Wix can support GDPR compliance, but it can’t account for everything happening on an individual website. This guide shows where Wix’s built-in controls stop, where consent gaps can appear, and how to...

Usercentrics partners with Wix to launch first consent solution on the Wix App Market

Munich, May 21, 2024 - Usercentrics, data privacy solutions leader managing over 6.3 billion monthly consents across platforms, partners with Wix, Wix.com Ltd. (NASDAQ:...

Indiana Consumer Data Protection Act (Indiana CDPA) – an overview

Indiana became the seventh US state to pass a consumer data privacy bill with the Indiana Consumer Data Protection Act (Indiana CDPA) on May 1, 2023. The law goes into effect on January 1, 2026,...

Texas Data Privacy and Security Act (TDPSA) — an overview

Texas became the eleventh state in the United States to enact a consumer privacy bill on June 18, 2023 with the passing of HB4, the Texas Data Privacy and Security Act (TDPSA). The law goes into...

Everything you need to know about China's Personal Information Protection Law

We look at data privacy in China with the Personal Information Protection Law (PIPL), the obligations it imposes on businesses operating within and outside...

Understanding Spanish cookie laws: A comprehensive guide

The Spanish data protection authority (AEPD) updated its guidelines on the use of cookies in Spain, requiring compliance from January 2024. We take a look at Spanish cookie laws to learn who they...

Cookiebot CMP supports Google Consent Mode V2

As Google Consent Mode-certified Consent Management Platforms (CMP) partner, Cookiebot CMP now supports Google Consent Mode v2 signaling so our customers using Google products experience a seamless integration with our standard CMP...

Google Consent Mode

How to make your Drupal website ready to comply with the Digital Markets Act (DMA)

Do you have a Drupal website and aren't sure if you're compliant with the latest privacy regulations? Are you thinking about using Drupal CMS for your new site...

DMA

How gatekeepers influence digital advertising services | Cookiebot CMP

Unpacking the Digital Markets Act (DMA): How gatekeepers influence digital advertising services

The Digital Markets Act (DMA) is shaking up the online advertising world, imposing new rules on tech gatekeepers that also...

DMA

How to make your Dorik website ready to comply with the Digital Markets Act (DMA)

Have a Dorik website and not sure what to do to comply with evolving data protection regulations? Or maybe you’re considering Dorik CMS for your new website but wonder...

DMA

Illustration of a checklist inside a shield surrounded by the European Union stars, user icon and a gavel

Digital Markets Act (DMA) compliance: what you need to know

The European Union’s Digital Markets Act (DMA) brings new requirements to digital companies and strengthens users’ rights. Get the information you need to be DMA-compliant.

DMA

Digital Markets Act (DMA) for startups and SMEs: Opportunities and challenges ahead

What are the pros and cons of the Digital Markets Act (DMA) for startups and small and medium-sized enterprises (SMEs)? In this article, we explore the opportunities...

DMA

How The Tennessee Information Protection Act (TIPA) affects both consumers and businesses | Cookiebot

Tennessee Information Protection Act (TIPA) - a comprehensive guide

The Tennessee Information Protection Act became the eighth data privacy law enacted at the state level in the United States. It was signed into law on the same day as Montana's privacy legislation.

Illustration of the map of Europe with the European Union stars having a dictionary in the center

Digital Markets Act glossary: Legal definitions and DMA terms every business should know

In this comprehensive glossary, we’ll explore the DMA terms and provide clear explanations to help you navigate the...

DMA

European Digital Markets Act (DMA) | Cookiebot

DMA: The European Digital Markets Act explained

The Digital Markets Act (DMA) in the European Union came into effect in November 2022, nominating influential “gatekeepers”. We look at the impact of the DMA privacy law on user privacy and...

DMA

Montana Consumer Data Privacy Act (MTCDPA): A comprehensive guide

The Montana Consumer Data Privacy Act was signed into law on the same day as Tennessee’s. It is the United States’ ninth state-level data privacy law.

Saudi Arabia data protection law and the Personal Data Protection Law (PDPL) | Cookiebot

PDPL: Saudi Arabia’s Personal Data Protection Law

Saudi Arabia's Personal Data Protection Law was implemented in March 2022, with enforcement set to commence a year later. This regulation shares many similarities with the GDPR in scope and provisions.

Case Study: Up Blue achieves sky high consent rates for clients with Cookiebot CMP

Internet marketing specialists Up Blue are committed to the best tools, best practices, and ensuring their clients...

Important privacy compliance rules for WordPress cookie banners

Is your WordPress cookie banner GDPR-compliant?

Wondering if your cookie banner is GDPR compliant? In this article, we've put together the most important privacy compliance rules for WordPress cookie banners. Learn how to determine if your WordPress cookie banner is GDPR-compliant,...

FADP - Switzerland's Federal Act on Data Protection

In this article, learn more about how to make your use of cookies compliant with the Swiss Data Protection Act (FADP) and the EU’s GDPR with Cookiebot consent management platform (CMP). On 25...

Illustration with icons related to personal data - Cookiebot

Personal Data Breaches: What they are and how to prevent them

Personal data breaches can happen to organizations of any size and cause damage ranging from financial losses and other penalties to loss of reputation and customer trust. Breaches can be...

Case Study: SoBold's success with the Cookiebot™ WordPress Plugin

Discover how SoBold leveraged the Cookiebot WordPress Plugin to offer innovative GDPR compliance solutions to their clients.

Illustration The Internet Advertising Bureau (IAB) TCF v2.2

News from the IAB: Major changes in the new TCF v2.2

The Internet Advertising Bureau (IAB) has recently unveiled TCF v2.2, introducing significant modifications that will have a profound impact on the dynamics of online advertising for publishers and advertisers...

What is Server-Side Tagging?

Explains what server-side tagging is, how it differs from client-side and server-side tracking, and what it takes to set it up with Google Tag Manager while keeping consent enforcement intact.

Illustration icon apps on a phone - Cookiebot

Apps GDPR Compliance Report

A special report by Usercentrics uncovers pervasive privacy noncompliance across the mobile application market in the European Union. It shows how apps are in limbo, while websites and web-based ecommerce are increasingly “privacy first” and in...

Usercentrics leadership changes

Munich, 06.10.2022 – Usercentrics, leading provider of consent management solutions, today announced leadership changes to accelerate the company’s innovation in consent management and data privacy. Since the implementation of...

Certified Partner of Google Consent Mode

Google has announced that Cookiebot consent management platform (CMP) is officially a certified partner of Google Consent Mode! Cookiebot CMP has worked seamlessly with Google Consent Mode since its launch in 2020, enabling you to...

Google Consent Mode

Illustration of a magnifying glass over the state of Virginia - Cookiebot

Virginia Consumer Data Protection Act (VCDPA)

Virginia became the second state in the US to pass a comprehensive data privacy law when the Virginia Consumer Data Protection Act (VCDPA) was signed into law in March 2021. The VCDPA takes effect January 1, 2023 and will affect companies and...

Google Consent Mode and Cookiebot CMP

Google Consent Mode is a way for your website to measure conversions and get analytics insights while being fully GDPR compliant when using services like Google Analytics, Google Tag Manager (GTM) and Google Ads. Google Consent Mode enables...

Google Consent Mode

Deep dive into cookie banners, including the types of cookie banners (or privacy banners) based on mode of consent, and cookies banner best practices that safeguards user privacy and complies with regulations

Cookie banner: legal requirement or best practice?

Think back to the last time you visited a new website. Do you remember seeing a popup message about the site’s use of cookies? That's a cookie banner.

Cookiebot CMP statement on preliminary ruling from Wiesbaden

The Wiesbaden preliminary ruling has been overturned. Following the preliminary ruling of the Wiesbaden Administrative Court of December 1, 2021, the appeals court Hessischer Verwaltungsgerichtshof,...

Cookiebot CMP uncovers pharmacy GDPR violations

89% of the 150 most popular pharmacy webshops in the EU fail GDPR compliance by allowing sensitive personal data to be tracked by third parties without end-user consent, when customers browse and buy pharmaceutical products for their mental...

Usercentrics and Cookiebot join forces

The two European companies align to scale data consent management globally, addressing consumers’ demand for greater insight and control into how companies track and use their personal information.

Cookie Law: A Complete Guide to Global Regulations and Compliance Requirements

Cookie laws now span the EU, U.S., UK, and beyond, affecting businesses of every size that collect data from website visitors. Here's what applies, where, and why it...

What are tracking cookies and how do they work?

Does your website use cookies? The answer is probably yes. Learn more about how to find and control the tracking cookies on your website using Cookiebot CMP to enable compliance with data privacy laws.

What is cookie consent? Requirements and tools to comply with global data privacy laws

Most websites today use cookies and other tracking technologies to collect personal data from users and about their activities. Where your users are located...

Third-party cookies phase out

Ebiquity and Cookiebot consent management platform (CMP) jointly analyzed the state of third-party marketing cookies (3PMCs) on large ad-funded domains to see what difficulties face media advertisers and end-users alike in busy online holiday...

10 of the Best GDPR Compliance Software Solutions

The General Data Protection Regulation (GDPR) is one of the strictest data privacy and security laws in the world. Navigating the complexities of GDPR compliance can be daunting for any...

CookieInfo and Cookiebot CMP

As a partner of Cookiebot consent management platform (CMP), CookieInfo – a scale-up located in the Netherlands – provides clients with highly customizable cookie banners designed to fit each specific website and to strike a balance...

The ePrivacy Directive and the Evolution of Data Privacy in the EU: What You Need to Know

The ePrivacy Regulation proposal has been withdrawn. We look at the continuing influence of the ePrivacy Directive in the EU, evolving privacy compliance...

A website cookie policy is at the heart of compliance with most major data privacy laws

How to create an effective cookie policy for your website

Information and choice about data privacy are among the fastest growing consumer demands. Consumers want transparency into and control of how their data is handled when visiting your website, and they are...

Hong Kong PDPO

Hong Kong’s Personal Data Privacy Ordinance was enacted in 1996 and amended in 2012. As is the case with many other data privacy laws, it prescribes measures for how to handle individuals’ personal data safely, thus protecting their privacy rights. Hong Kong’s PDPO considers...

Hinto Cookie Compliance

As a partner of Cookiebot consent management platform (CMP), Hinto – a leading software integrator and designer of open-source applications – provides a bullet-proof cookie scanning technology and compliance solution as the engine of their Hinto Sweet Cookie offering to...

US Data Privacy Laws

A data privacy wave is making its way across the US, washing over state legislatures and challenging the adtech industry’s mass-collection of personal data for profit. In the absence of a federal law, a state-by-state patchwork of data protection bills have begun to take...

Kenya Data Protection Act

Kenya’s Data Protection Act came into effect on November 25, 2019, and is now the primary law on data protection in the country. It gives effect to article 31 in the constitution of Kenya that stipulates privacy as a fundamental right. Like is...

APPI Japan

Japan’s wide-ranging Act on the Protection of Personal Information (APPI) was passed in 2003 and amended in 2015 and again in 2020. Not unlike many other data privacy laws, its purpose is to protect an individual’s rights and interests while also considering the utility of personal...

Everything You Need to Know About Shopify Cookies: Types, Consent Requirements, and How to Comply

If you have a Shopify website, you need to know what cookies are essential, how to manage them, and how to communicate your...

PIPA - South Korea’s Personal Information Protection Act

South Korea’s wide-ranging Personal Information Protection Act (PIPA) was passed on September 30, 2011, making the country one the world’s strictest privacy regimes. Like many other comprehensive...

PIPEDA: Canada's data privacy law explained

The Personal Information and Electronic Documents Act (PIPEDA) has regulated how private sector organizations handle Canadians' personal information since 2000. Compliance obligations apply regardless of where your business is...

Is Google Analytics 4 GDPR compliant?

Find out if Google Analytics 4 is GDPR compliant and what steps you can take to ensure that your website analytics are in line with data protection regulations.

Google Consent Mode

PDPA Thailand

Thailand’s Personal Data Protection Act (PDPA) regulates the processing of personal data for commercial use. It applies to any company, organization or website located inside Thailand and for businesses with users in Thailand. The PDPA Thailand explicitly requires you to...

UK GDPR after Brexit

The United Kingdom left the EU on January 1, 2021. When the UK was still a part of the European Union, the EU's General Data Protection Regulation (GDPR) applied domestically. However, since the country has left the bloc, how the GDPR works has changed inside the UK. In...

New Zealand’s Privacy Act 2020

New Zealand’s Privacy Act 2020 and the NZ Privacy Principles require you to inform users located inside New Zealand about your website’s use of cookies and trackers, as well as how you are processing their personal information, and...

Data Protection Act Malaysia (PDPA)

Malaysia’s Personal Data Protection Act (PDPA) regulates the processing of personal data for commercial use inside the country. It applies to any website, company or organization located inside Malaysia. Malaysia’s PDPA requires you to...

Third-Party Cookies: What They Are, Why Google Is Not Removing Them, and What Replaced Them in Other Browsers

Google started to phase out third-party cookies for all Chrome users in 2024, but advertisers and publishers will still need...

Google Consent Mode

PDPA - Personal Data Protection Act Singapore

Singapore’s Personal Data Protection Act (PDPA) took effect in 2014 but was amended in October 2020 to include, among other additions, changes to its consent framework. In this blogpost, we break down Singapore’s PDPA – its rights,...

What is website tracking and can it align with data privacy laws?

Website tracking offers valuable insights, but it raises concerns about user privacy and regulatory requirements. We explore how websites can implement tracking effectively while respecting privacy laws...

Google Consent Mode

California Privacy Rights Act (CPRA)

The California Privacy Rights Act (CPRA) is a 2020 amendment to the CCPA that expanded consumer rights and created the California Privacy Protection Agency (CPPA) as enforcer. It has been in full effect since January 1, 2023, with further...

EDPB Guidelines and Cookie Walls

The European Data Protection Board (EDPB) has adopted guidelines for GDPR compliance, clarifying what constitutes valid consent on websites and ruling the use of “cookie walls” illegal. EDPB is the highest supervisory authority on the GDPR...

Schrems II and beyond: EU-US international data transfers

The Schrems II decision in 2020 struck down the Privacy Shield that enabled data transfers from the EU to the US. We look at this landmark ruling, its immediate impact on transatlantic data transfers,...

Google Consent Mode

Google Consent Mode is a ground-breaking new feature that makes consent the defining condition for how Google Analytics and Google Ads run. Cookiebot CMP is ready and fully integrated.

Google Consent Mode

POPIA: Compliance with South Africa’s data protection law

We break down South Africa’s Protection of Personal Information Act (POPIA) — its key provisions, rights, requirements, and how Cookiebot consent management platform (CMP) can help you achieve compliance.

What You Need to Know About the GDPR Cookies, Consent, and Compliance

Your website is required under the EU’s General Data Protection Regulation (GDPR) to let users from inside Europe control the activation of cookies and trackers that collect their personal data. This is...

Google Consent Mode

CCPA Privacy Policy: Requirements and best practices

What does a CCPA-compliant privacy policy look like? We examine what the California data privacy law requires, and how to create a valid CCPA privacy policy.

Privacy Policy and Cookies in Australia - Cookiebot

Australia Privacy Policy and Cookies

Australia’s Privacy Act and its Australian Privacy Principles (APP) require a website to have an updated privacy policy (known as APP privacy policy) that informs users of how it collects and handles personal information. In this blogpost, we look at...

California Consumer Privacy Act (CCPA)

On August 14, 2020, the final CCPA regulations were approved and took effect immediately. This means that enforcement of the CCPA can now go ahead with the Attorney General’s Office as the lead supervisor. In this blogpost, a...

CCPA - California Consumer Privacy Act

California Consumer Privacy Act (CCPA) took effect on January 1, 2020. It empowers California residents with new rights over the data they generate every day, and forces companies who do business in the state to play by new rules. So...

Automatic Cookie Consent

We have dramatically simplified the implementation of ‘prior consent’ on your website, so that the blocking of trackers right from the moment that the user lands on your website now has become automatic. This is a ground-breaking and unique improvement in the field of consent...

Planet49 and EU GDPR

On October 1, 2019, the highest legal entity of the EU, the Court of Justice of the European Union (CJEU), ruled in the case of Planet49 that the only form of valid consent for processing user data in the EU is explicit consent, i.e. consent that is actively and specifically given by...

California Consumer Privacy Act (CCPA)

California was one of the first states in the US to enshrine privacy as an “inalienable right” of all people, when it amended its constitution in 1972. On January 1, 2020, California became the first state to enact a data privacy law...

CCPA and Cookies

Cookies are mentioned only once in the California Consumer Privacy Act (CCPA), along with beacons, pixel tags, mobile ad identifiers and similar technology. But don’t be fooled – cookies are very important for CCPA compliance, since they are one of the most common tracking...

EDPB and Cookie Walls

A cookie wall is a way for websites to deny users access if they don’t consent to all cookies and trackers present on that website. However, the European Data Protection Board’s (EDPB) Guidelines on consent from May 2020 rule out cookie walls as a valid way for websites of...

GDPR after Brexit

Brexit happened. The United Kingdom left the European Union on January 1, 2021. Post Brexit, the GDPR will come to mean several things in the UK, as new domestic data laws will take effect. In this blogpost, we give you an overview of what is changing and what will remain the same...

Google Analytics and CCPA: What GA4 Users Need to Know

Universal Analytics has retired, and Google Analytics 4 changes how the CCPA applies to your site. This article explains why GA4 client identifiers count as personal information under the CCPA and...

CCPA vs GDPR

The California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR) are two major data protection laws. But what are the differences between the CCPA and GDPR? How do they overlap? And how do you make your website compliant with both?

CCPA for Personal Information

In this blogpost, we dive into the specifics of the CCPA’s personal information provision. What’s the exact definition? What are some concrete examples of CCPA’s personal information? And what does the CCPA say about the use...

How the GDPR affects the USA and how US websites can enable compliance | Cookiebot

GDPR USA

In this blogpost, we look at how the GDPR affects the USA and how US websites can enable compliance with the EU data law through consent management platforms like Cookiebot CMP. We also take a critical look at the tech industry’s narrative of “technological evolution”, in which...

CCPA Consumer Rights in 2026 Explained

The California Consumer Privacy Act (CCPA) empowers California residents and gives them new rights when it comes to the collection of their online data. Here’s what you need to know.

Nevada Privacy Law: Consumer Rights and Compliance

Consumer rights and compliance under Nevada privacy law

Nevada was one of the first states to enact privacy laws, though limited in scope, and to enable its residents to opt out of having their data sold. We look at the Nevada data privacy laws, how they've...

Top 10 Consent Management Platforms (CMPs) Compared

User consent is crucial to complying with privacy regulations like the GDPR and CCPA. But consent has to be obtained, stored, and signaled in the right way. This emphasizes the need for companies to...

UK Data Protection Act 2018 (DPA)

The Data Protection Act 2018 (DPA ACT) is a domestic law governing the use of personal data and the flow of information in the United Kingdom. The UK is no longer part of the EU and a new and amended Data Protection Act has taken...

IAB Transparency and Consent Framework (TCF v2.4)

The IAB's Transparency and Consent Framework has been updated to TCF v2.4, adding cross-device consent flexibility, new Feature disclosures, and a simplified Legitimate Interest signal for Special...

IAB CCPA Compliance Framework

California Consumer Privacy Act (CCPA) took effect on January 1, 2020. Compliance with the new California privacy law means that businesses must implement new procedures for how they collect and sell personal information. The IAB CCPA...

What is Google Tag Manager, and how does it work with the General Data Protection Regulation (GDPR) and cookie consent?

With Cookiebot CMP, you can easily make your use of Google Tag Manager GDPR...

Google Consent Mode

What is a cookie notice and why do you need one?

Transparency about data use builds trust between a website’s operator and its users, between the people and “the Internet”. The intersection of this manifests with the cookie notice, cookie banner, or cookie pop-up. Being...

CCPA Compliance: Requirements and Checklist to Help

An overview of how the California Consumer Privacy Act applies to businesses anywhere in the world with California customers, what the CPRA changed, and the practical steps to help meet the requirements.

EU GDPR and Privacy Laws

The EU privacy laws consist of the General Data Protection Regulation (GDPR) and the Electronic Privacy Directive (ePD), also known as the ePrivacy Directive or simply the “EU cookie law”. They control the flow of data on the EU continent and form the strongest data protection framework in...

UK GDPR: An Overview and Compliance Support Guide

The UK left the EU on December 31, 2021. After Brexit, the UK is no longer regulated domestically by the European General Data Protection Regulation (GDPR), which governs processing of personal data from inviduals inside the EU. Instead,...

NOYB cookie banner complaints

On May 31 2021, privacy group NOYB led by Max Schrems filed over 500 draft complaints to websites in the EU for using unlawful cookie banners. Using a new tool that can determine the GDPR compliance of a website’s consent flow,...

Cookie Consent Solution

A sense of dizziness might occur when the dimensions of online privacy issues are reflected on. It’s understandable to feel both disoriented and defenseless. A cookie solution is a vital, local tool to take back control of our online lives from big third-party ad tech companies, but...

Cookie Control

If you think clearing your browser cookies is enough to prevent you from being monitored, think again. The tracking industry is always coming up with new methods, and now it’s even possible to recognise users via hidden ultrasound signals in ads and browser shadow data.

Why choose Cookiebot CMP?

Cookiebot CMP launched out of Denmark in 2012 on a mission to protect privacy and make the Internet a safe and respectful environment based on transparency and consent. Today, Cookiebot CMP is the world’s leading consent management...

Cookiebot CMP App in HubSpot App Marketplace

Hubspot GDPR and CCPA Compliance

HubSpot helps you manage your inbound marketing with a detailed insight into your existing and potential customers. With the Cookiebot CMP App in HubSpot, your website can become GDPR and CCPA compliant.

What you need to know about cookie compliance globally and how to become compliant

If you own a website that collects data from visitors, which most do, you most likely need to comply with cookie laws and consent regulations. Here’s how to become...

GDPR fines and warnings

ONE YEAR has passed since the European GDPR (General Data Protection Regulation) came into effect on May 25, 2018. A helicopter view of the situation a year later reveals both challenges and promises to its enforcement and effects. Here is a GDPR anniversary update!

Cookiebot GDPR compliance report

When EU citizens visit their governments online, or when they access public health service resources about sensitive issues such as pregnancy, sexual health, cancer or mental illness, more than 100 commercial companies are systemically and...

Cookie Policy Texts

Cookie banners must clearly explain what cookies a site uses, why, and how visitors can give or withdraw consent. The GDPR requires clear, informed opt-in before non-essential cookies load; the CCPA/CPRA instead requires an opt-out mechanism for data sale or sharing, including...

Cookie Scanner

The Internet has more dimensions than you can see. Even your own website has dimensions that are not immediately visible to you, and in these secret grey spaces hide trackers and intruders that see everything and remember all. Here, no privacy exists. But there is a way to...

Cookie Scripts

If you are not a developer, as I am not, the best way to understand this tech world is sometimes through metaphors. They risk simplifying things, sure, but they also lend us perspective on the rampant surveillance capitalism of the ad tech industry that can otherwise be hard to...

Cookie disclaimers vs. cookie consent

Cookie disclaimers and cookie banners are not the same thing. Sure, you could use the words interchangeably, but there’s a big difference between the two when it comes to compliancy with the existing European data protection law – the General...

Google sets industry standard on cookie consent

Google now requires full cookie compliance of all ad partners and points at Cookiebot CMP as a solution. Meanwhile, thousands of Italian websites has taken Cookiebot CMP in use since June, when the authorities...

Cookie Control

Efforts to regulate online surveillance and protect digital privacy has crystalized in the EU as the General Data Protection Regulation (GDPR), and in the US as the California Consumer Privacy Act (CCPA). In this blogpost, we look at cookie control in the EU and US, including...

Blog

Curated articles

Subscribe to our newsletter

Browse all

Download the CMP integration for your preferred CMS

Usercentrics Cookiebot plugin for WordPress

Usercentrics for Wix