GDPR, ePrivacy and CCPA - Advice and Insights

CIPA Demand Letter: What It Means for Your Website and What to Do About It

Demand letters citing CIPA are reaching businesses across the U.S. at an unprecedented rate in 2026. They often target websites running standard cookies...

State Privacy Regulators Are Teaming Up: Here's What It Means for Your Website

State privacy enforcement is changing fast. More than 20 states now enforce their own privacy laws, and eleven state attorneys general plus California's...

CIPA, GPC, and Your Checkout Flow: What Retailers Are Getting Wrong

Retailers are cleaning up cookie banners while CIPA suits and GPC signal failures can slip through the checkout flow itself. This piece walks through the specific...

Cookiebot™ Launches CIPA Consent Template to Address Growing Wave of CIPA Website Tracking Lawsuits

CIPA demand letters are targeting sites that let tracking technologies fire before a visitor consents. This piece walks...

Why Your Website's Privacy Risk Looks Different in 2026

A plain-English look at why U.S. privacy enforcement feels different this year. More than 20 states now have privacy laws, website-tracking lawsuits under California's CIPA have surged, and a...

California Invasion of Privacy Act: CIPA Requirements

CIPA is a 1967 California wiretapping law that is now being used to sue website owners over cookies, chatbots, and session replay tools deployed without prior user consent. This guide covers what the law...

A Vibe-Coded Cookie Banner Isn't a Compliance Program

Some founders and indie hackers are using AI to build their own cookie banners to save on subscription fees. This article helps U.S. site owners evaluate that trade-off. It examines why DIY banners...

CCPA vs. CPRA: What Is the Difference?

The CPRA did not replace the CCPA, but rather amended and expanded it, adding rights, obligations, and a new enforcement agency. This guide breaks down what changed between the two: compliance thresholds, consumer rights, sensitive...

What Is the ECPA And Is Your Website at Risk?

The Electronic Communications Privacy Act (ECPA) is a 1986 federal wiretap law (like CIPA in 1967) that plaintiffs are now using to sue businesses over website tracking technologies like pixels, cookies, and session replay tools. This...

How to Comply With CCPA: Step-by-Step Compliance Support for Businesses

We cover steps to help achieve and maintain CCPA compliance, including a step-by-step checklist for business owners, website managers, and compliance leads. Learn about CCPA requirements, get...

California Just Signed a Fix for CIPA Into Law — Your Website Might Still Get Sued

In California, Governor Newsom has signed SB 690, and it narrows exactly one CIPA theory: § 638.51, the pen-register claims tied to website tracking. Expect it to...

Iowa Consumer Data Protection Act (ICDPA): Privacy Compliance Overview for U.S. Businesses

The Iowa Consumer Data Protection Act (ICDPA) has been enforceable since January 1, 2025. This guide covers who it applies...

Delaware Personal Data Privacy Act (DPDPA): A U.S. Business Overview

The Delaware Personal Data Privacy Act (DPDPA) has applied to qualifying businesses since January 1, 2025. This guide covers who must comply, consumer rights, business obligations, enforcement,...

Retail Consent Audit Guide

Find out where your site is losing consent, signal, and first-party data before Black Friday traffic hits.

Florida Digital Bill of Rights (FDBR): An Overview

The Florida Digital Bill of Rights (FDBR) took effect July 1, 2024, giving Florida residents rights over their personal data. It applies only to businesses with over $1 billion in global revenue that also meet...

Best WordPress Cookie Consent Plugins in 2026 (Ranked and Compared)

A ranked, criteria-based comparison of ten WordPress cookie consent plugins for 2026. Covering CCPA and state privacy law support, free-tier depth, prior blocking, and Google Consent Mode v2.

AI Shopping Assistants Are Already Talking to Your Customers: Is Your Consent Framework Keeping Up?

AI shopping assistants are already discovering, comparing, and recommending products for your customers, and...

COPPA Compliance with Checklist: What U.S. Website Operators Need

The FTC's updated COPPA Rule has been fully enforceable since April 22, 2026, and it changes what U.S. website and app operators owe parents and regulators. This checklist walks through verifiable...

What the 2026 State of Digital Trust Report Means for AI and Retail/E-Commerce

Usercentrics' 2026 State of Digital Trust Report surveyed 11,000 consumers on AI and data privacy, and the findings are direct: shoppers are already canceling, switching,...

What Are Third-Party Cookies? How They Work and What Happens Next

A third-party cookie is a browser cookie set by a company other than the owner of the website a visitor is browsing. It usually comes from an external service you've chosen to add to your site, such as...

Connecticut Data Privacy Act (CTDPA): A Compliance Guide for U.S. Businesses

Connecticut's data privacy law imposes consent requirements, consumer rights, and business obligations on companies handling residents' personal data. Multiple...

Utah Consumer Privacy Act (UCPA): A Compliance Guide for Businesses

This guide explains the Utah Consumer Privacy Act (UCPA): who it covers, what rights it gives Utah consumers, and how 2026 amendments affect compliance. It's written for U.S. businesses weighing UCPA...

How Does GDPR Affect U.S. Companies? Real-World Impact on Marketing and Analytics

The GDPR is the data privacy regulation that protects the rights of individuals located in the EU/EEA, notwithstanding their citizenship. (The UK has its own...

Colorado Privacy Act (CPA): U.S. Business Compliance Guide

The Colorado Privacy Act (CPA) is a comprehensive state privacy law that grants Colorado residents meaningful rights over their personal data and imposes clear obligations on businesses...

Montana Consumer Data Privacy Act (MTCDPA): A Comprehensive Guide

Montana's MTCDPA has applied since October 2024, but SB 297 rewrote major parts of it effective October 1, 2025, with lower applicability thresholds, an eliminated cure period, new per-violation penalties,...

How U.S. Data Privacy Laws Affect Your Website

US data privacy laws are rapidly expanding, with nearly 20 states now enforcing comprehensive consumer privacy regulations. Businesses must understand how these laws affect website data collection, tracking, and consent...

Gramm-Leach-Bliley Act (GLBA): What It Is and How to Comply

This article explains the Gramm-Leach-Bliley Act (GLBA), the federal law setting privacy and security requirements for U.S. financial institutions. It covers who must comply,...

Consent management for websites | Cookiebot CMP

GDPR Consent Management

The General Data Protection Regulation (GDPR) and ePrivacy Directive affect how you as a website owner must obtain and store cookie consents from your visitors from the EU. See how to meet data privacy regulation requirements with Cookiebot™ CMP

Vermont Data Privacy and Online Surveillance Act (VDPOSA): Requirements, Rights, and Compliance Support

The Vermont Data Privacy and Online Surveillance Act (VDPOSA) makes Vermont the 23rd U.S. state to enact a...

Cookiebot by Usercentrics vs. CookieYes (2026): Features, Pricing, and Which One to Choose

A side-by-side comparison of Cookiebot by Usercentrics and CookieYes covering pricing, setup, and enterprise features to...

Québec Law 25: An Overview

Québec Law 25 is Canada's most stringent provincial privacy law, applying extraterritorially to any organization that handles the personal information of Québec residents. This article explains who must comply, what consent rules apply...

Louisiana Data Privacy Act (LDPA): A Compliance Guide for U.S. Businesses

The Louisiana Data Privacy Act (LDPA) takes effect January 1, 2027, making Louisiana the third state in 2026 to pass a comprehensive consumer privacy law. It...

The Definitive Guide to Google Consent Mode v2: Requirements and Setup

Google Consent Mode v2 is the critical link between privacy compliance and your ad performance. Essential for EU/EEA traffic, it helps your Google tags respect user consent while supporting accurate...

California Opt Me Out Act: What Website Owners Should Know

The California Opt Me Out Act requires any CPRA-covered business to automatically honor browser-based opt-out signals as valid Do Not Sell or Share requests. This includes Global Privacy Control (GPC).

The Langley School builds a culture of data privacy with Cookiebot™ CMP

Introduction to The Langley School The Langley School is an independent K–8 institution founded in 1942, and based in McLean, Virginia, in the greater...

The Alabama Personal Data Protection Act (APDPA): A Guide for Website Owners

Alabama is the latest U.S. state to enact comprehensive data privacy legislation. The Alabama Personal Data Protection Act (APDPA) was passed by the Alabama...

Oklahoma Consumer Data Privacy Act (OCDPA): A Compliance Guide for U.S. Businesses

The Oklahoma Consumer Data Privacy Act takes effect January 1, 2027, bringing opt-out requirements for data sales and targeted advertising, affirmative consent...

California Age-Appropriate Design Code (CAADC): What U.S. Businesses Need to Know

California's Age-Appropriate Design Code Act imposes privacy-by-default, data minimization, and dark pattern restrictions on businesses serving minors...

How Do I Write a Privacy Policy for My Website?

A practical guide to drafting, structuring, and maintaining a privacy policy using a 12-step framework, with guidance on automation, governance, and mobile app requirements.

Guide to CIPP Certification: What It Is and How To Get It

Data privacy has moved from a specialist concern to a mainstream business priority. Regulatory frameworks are multiplying and evolving, enforcement is intensifying, and organizations of every size are under...

Usercentrics surpasses
100K paying B2B customers as demand for Privacy-Led Marketing soars

Munich, February 18, 2025 - Usercentrics, the leading European privacy tech company, has announced that it has surpassed...

Cookiebot™ by Usercentrics response to the new German consent management regulatory ordinance

Munich, February 7, 2025 - As the leading European CMP provider, we strongly believe in the importance of privacy and data...

Data privacy vs data security: Key differences explained

The importance of data has sparked a digital gold rush, where organizations are eager to collect as much as possible to improve their operations, customer experience, and especially their bottom...

What is global privacy control? What you need to know about GPC

Global Privacy Control aims to provide individuals control and standardize communication of consent preferences for personal information online. The initiative offers a universal opt-out...

What you need to know about privacy by design

Privacy by design begins before anyone visits your website. Privacy by design is a framework that prioritizes data privacy, user experience, and data protection throughout every phase of projects and operations. Discover its seven principles...

What’s important to know about session cookies and the GDPR

Session cookies are temporary text files stored on your device by websites during your visit, enabling the site to remember information like login status or items in your shopping cart. They help maintain a...

Cookiebot™ by Usercentrics listed on Tekpon’s Top Compliance Software Tools of 2024

Cookiebot CMP has been listed on Tekpon’s list of Top Compliance Software Tools for 2024. Tekpon is a leading software aggregator platform run by enthusiastic...

Microsoft UET Consent Mode: Ensuring Microsoft GDPR compliance in advertising

Microsoft UET Consent Mode ensures compliance with data privacy laws for businesses using Microsoft Ads. With Cookiebot CMP, companies can automate...

What you need to know about the GDPR’s data subject rights

Personal data is an integral part of nearly every online service and transaction. Websites, apps, and other connected platforms collect this data for companies to learn about user behaviors...

How to write a privacy policy in 12 steps

For companies, data protection is more crucial than ever. Website visitors, app users, and customers are increasingly concerned about how their personal information is collected, stored, and used, making it essential for businesses...

What is a DPA? Understanding data processing agreements

Data processing agreements (DPA) are essential contracts that define how personal data is handled between controllers and processors. They’re required under many data protection...

A complete PIPEDA compliance checklist and requirements

The Personal Information Protection and Electronic Documents Act (PIPEDA) is Canada's federal privacy law for businesses, governing how personal information is collected, used, and shared...

10 of the best CCPA compliance software compared

CCPA compliance software simplifies meeting the requirements of California's privacy laws by automating data management and consumer rights requests. This article provides a comparison of 10 solutions,...

A step-by-step checklist to meet GDPR compliance requirements

GDPR compliance is essential for safeguarding personal data and maintaining trust. This regulation sets strict standards for data protection and privacy, impacting organizations worldwide. Here’s...

Cookiebot CMP certified by Google as a Gold Tier CMP Partner

Cookiebot CMP has earned Google’s Gold Tier certification for CMP Partners. In addition to meeting Google’s stringent standards for CMP Partner certification, Cookiebot CMP has also met additional high...

Achieve privacy compliance with just a few clicks in the Google tag UI – certified CMP with Consent Mode

Easily implement Cookiebot CMP with just a few clicks from your Google Ads, Analytics, or Tag Manager account.

Google Consent Mode

Customizing cookie consent popups on Wix: tips and tricks

Having a well branded and user-friendly cookie consent popup can make all the difference for the consent rates on your website. We’ve rounded up our best recommendations to help you provide great...

Oregon Consumer Privacy Act – an overview

With the Oregon Consumer Privacy Act in effect since July 1, 2024, companies doing business in the state need to comply with its provisions regarding the processing of Oregon residents’ personal data.

A Comprehensive Guide to Mastering Your WordPress CCPA Privacy Policy

WordPress doesn't enforce compliance with specific privacy regulations like the CCPA, but if your site draws visitors from California, compliance is essential. This guide covers everything from crafting a...

What you need to know to comply with Google’s consent requirements in Switzerland

Unlock your compliance guide. Download the essential checklist for Google's EU user consent policy expansion into Switzerland.

How to create a comprehensive WordPress privacy policy

Creating a privacy policy for your WordPress website helps meet the transparency requirements of global data protection regulations and national authorities’ guidelines and builds trust...

How to achieve GDPR and ePrivacy Directive compliance on your Wix website

Wix provides one of the world’s most popular website building platforms. Their users — and visitors to Wix websites — are all over the world. That means that Wix...

Usercentrics partners with Wix to launch first consent solution on the Wix App Market

Munich, May 21, 2024 - Usercentrics, data privacy solutions leader managing over 6.3 billion monthly consents across platforms, partners with Wix, Wix.com Ltd. (NASDAQ:...

Indiana Consumer Data Protection Act (Indiana CDPA) – an overview

Indiana became the seventh US state to pass a consumer data privacy bill with the Indiana Consumer Data Protection Act (Indiana CDPA) on May 1, 2023. The law goes into effect on January 1, 2026,...

Understanding WordPress cookies to remain privacy compliant

If you use WordPress for your website, you need to know about cookies, how WordPress uses them, and how to manage them to comply with laws like the GDPR and CCPA.

Everything you need to know about China's Personal Information Protection Law

We look at data privacy in China with the Personal Information Protection Law (PIPL), the obligations it imposes on businesses operating within and outside...

Understanding Spanish cookie laws: A comprehensive guide

The Spanish data protection authority (AEPD) updated its guidelines on the use of cookies in Spain, requiring compliance from January 2024. We take a look at Spanish cookie laws to learn who they...

Understanding Danish DPA cookie consent guidelines

If you offer goods and services to Danish users or track their website activity using cookies, you need their explicit consent to do so. But what does explicit consent mean, and how can you obtain it?

Why a Google-certified Consent Management Platform (CMP) is crucial for digital advertising

As Google mandates the use of a certified Consent Management Platform for businesses serving ads in the EU, EEA and UK,...

Cookiebot CMP supports Google Consent Mode V2

As Google Consent Mode-certified Consent Management Platforms (CMP) partner, Cookiebot CMP now supports Google Consent Mode v2 signaling so our customers using Google products experience a seamless integration with our standard CMP...

Google Consent Mode

How to make your Drupal website ready to comply with the Digital Markets Act (DMA)

Do you have a Drupal website and aren't sure if you're compliant with the latest privacy regulations? Are you thinking about using Drupal CMS for your new site...

DMA

How gatekeepers influence digital advertising services | Cookiebot CMP

Unpacking the Digital Markets Act (DMA): How gatekeepers influence digital advertising services

The Digital Markets Act (DMA) is shaking up the online advertising world, imposing new rules on tech gatekeepers that also...

DMA

How to make your Dorik website ready to comply with the Digital Markets Act (DMA)

Have a Dorik website and not sure what to do to comply with evolving data protection regulations? Or maybe you’re considering Dorik CMS for your new website but wonder...

DMA

Digital Markets Act (DMA) compliance: what you need to know

The European Union’s Digital Markets Act (DMA) brings new requirements to digital companies and strengthens users’ rights. Get the information you need to be DMA-compliant.

DMA

Digital Markets Act (DMA) glossary - DMA terms | Cookiebot

Digital Markets Act (DMA) for startups and SMEs: Opportunities and challenges ahead

What are the pros and cons of the Digital Markets Act (DMA) for startups and small and medium-sized enterprises (SMEs)? In this article, we explore the opportunities...

DMA

How The Tennessee Information Protection Act (TIPA) affects both consumers and businesses | Cookiebot

Tennessee Information Protection Act (TIPA) - a comprehensive guide

The Tennessee Information Protection Act became the eighth data privacy law enacted at the state level in the United States. It was signed into law on the same day as Montana's privacy legislation.

Digital Markets Act glossary: Legal definitions and DMA terms every business should know

In this comprehensive glossary, we’ll explore the DMA terms and provide clear explanations to help you navigate the...

DMA

European Digital Markets Act (DMA) | Cookiebot

DMA: The European Digital Markets Act explained

The Digital Markets Act (DMA) in the European Union came into effect in November 2022, nominating influential “gatekeepers”. We look at the impact of the DMA privacy law on user privacy and...

DMA

Saudi Arabia data protection law and the Personal Data Protection Law (PDPL) | Cookiebot

PDPL: Saudi Arabia’s Personal Data Protection Law

Saudi Arabia's Personal Data Protection Law was implemented in March 2022, with enforcement set to commence a year later. This regulation shares many similarities with the GDPR in scope and provisions.

Case Study: Up Blue achieves sky high consent rates for clients with Cookiebot CMP

Internet marketing specialists Up Blue are committed to the best tools, best practices, and ensuring their clients...

Important privacy compliance rules for WordPress cookie banners

Is your WordPress cookie banner GDPR-compliant?

Wondering if your cookie banner is GDPR compliant? In this article, we've put together the most important privacy compliance rules for WordPress cookie banners. Learn how to determine if your WordPress cookie banner is GDPR-compliant,...

Common PII Questions

Personal information is what data privacy laws around the world are all about. They are concerned with defining it, how it’s used, and how it’s kept secure and confidential. There are some differences among the world’s data privacy laws, but overall how Personally Identifiable...

FADP - Switzerland's Federal Act on Data Protection

In this article, learn more about how to make your use of cookies compliant with the Swiss Data Protection Act (FADP) and the EU’s GDPR with Cookiebot consent management platform (CMP). On 25...

Illustration with icons related to personal data - Cookiebot

Personal Data Breaches: What they are and how to prevent them

Personal data breaches can happen to organizations of any size and cause damage ranging from financial losses and other penalties to loss of reputation and customer trust. Breaches can be...

Case Study: SoBold's success with the Cookiebot™ WordPress Plugin

Discover how SoBold leveraged the Cookiebot WordPress Plugin to offer innovative GDPR compliance solutions to their clients.

Illustration The Internet Advertising Bureau (IAB) TCF v2.2

News from the IAB: Major changes in the new TCF v2.2

The Internet Advertising Bureau (IAB) has recently unveiled TCF v2.2, introducing significant modifications that will have a profound impact on the dynamics of online advertising for publishers and advertisers...

What is server-side tagging?

Learn what Server-Side Tagging is, how it works, and why it may be a key tool for future-proofing your company’s data strategy and developing a consent-centric digital ecosystem.

Illustration icon apps on a phone - Cookiebot

Apps GDPR Compliance Report

A special report by Usercentrics uncovers pervasive privacy noncompliance across the mobile application market in the European Union. It shows how apps are in limbo, while websites and web-based ecommerce are increasingly “privacy first” and in...

Usercentrics leadership changes

Munich, 06.10.2022 – Usercentrics, leading provider of consent management solutions, today announced leadership changes to accelerate the company’s innovation in consent management and data privacy. Since the implementation of...

Certified Partner of Google Consent Mode

Google has announced that Cookiebot consent management platform (CMP) is officially a certified partner of Google Consent Mode! Cookiebot CMP has worked seamlessly with Google Consent Mode since its launch in 2020, enabling you to...

Google Consent Mode

Google Consent Mode and Cookiebot CMP

Google Consent Mode is a way for your website to measure conversions and get analytics insights while being fully GDPR compliant when using services like Google Analytics, Google Tag Manager (GTM) and Google Ads. Google Consent Mode enables...

Google Consent Mode

Deep dive into cookie banners, including the types of cookie banners (or privacy banners) based on mode of consent, and cookies banner best practices that safeguards user privacy and complies with regulations

Cookie banner: legal requirement or best practice?

Think back to the last time you visited a new website. Do you remember seeing a popup message about the site’s use of cookies? That's a cookie banner.

Cookiebot CMP statement on preliminary ruling from Wiesbaden

The Wiesbaden preliminary ruling has been overturned. Following the preliminary ruling of the Wiesbaden Administrative Court of December 1, 2021, the appeals court Hessischer Verwaltungsgerichtshof,...

Cookiebot CMP uncovers pharmacy GDPR violations

89% of the 150 most popular pharmacy webshops in the EU fail GDPR compliance by allowing sensitive personal data to be tracked by third parties without end-user consent, when customers browse and buy pharmaceutical products for their mental...

Usercentrics and Cookiebot join forces

The two European companies align to scale data consent management globally, addressing consumers’ demand for greater insight and control into how companies track and use their personal information.

A guide to global cookie laws and how to comply

If your company operates globally and processes personal data, you need to be aware of global cookie laws and how they impact your data collection process. Here’s what you need to know about cookie laws around the world.

Cookiebot CMP Privacy Trigger | Faster and easier cookie consent for your website

Cookiebot consent management platform (CMP) comes with a Privacy Trigger for your website that makes the end-user consent interaction faster and more...

What are tracking cookies and how do they work?

Does your website use cookies? The answer is probably yes. Learn more about how to find and control the tracking cookies on your website using Cookiebot CMP to enable compliance with data privacy laws.

What is cookie consent? Requirements and tools to comply with global data privacy laws

Most websites today use cookies and other tracking technologies to collect personal data from users and about their activities. Where your users are located...

Third-party cookies phase out

Ebiquity and Cookiebot consent management platform (CMP) jointly analyzed the state of third-party marketing cookies (3PMCs) on large ad-funded domains to see what difficulties face media advertisers and end-users alike in busy online holiday...

10 of the best GDPR compliance software solutions

The General Data Protection Regulation (GDPR) is one of the strictest data privacy and security laws in the world. Navigating the complexities of GDPR compliance can be daunting for any...

CookieInfo and Cookiebot CMP

As a partner of Cookiebot consent management platform (CMP), CookieInfo – a scale-up located in the Netherlands – provides clients with highly customizable cookie banners designed to fit each specific website and to strike a balance...

After the EU ePrivacy Regulation: Data Privacy Evolution in the EU and the Legacy of the ePrivacy Directive

The ePrivacy Regulation will bring changes to data privacy in the European Union, impacting everything from what data it...

A website cookie policy is at the heart of compliance with most major data privacy laws

How to create an effective cookie policy for your website

Information and choice about data privacy are among the fastest growing consumer demands. Consumers want transparency into and control of how their data is handled when visiting your website, and they are...

Hong Kong PDPO

Hong Kong’s Personal Data Privacy Ordinance was enacted in 1996 and amended in 2012. As is the case with many other data privacy laws, it prescribes measures for how to handle individuals’ personal data safely, thus protecting their privacy rights. Hong Kong’s PDPO considers...

Hinto Cookie Compliance

As a partner of Cookiebot consent management platform (CMP), Hinto – a leading software integrator and designer of open-source applications – provides a bullet-proof cookie scanning technology and compliance solution as the engine of their Hinto Sweet Cookie offering to...

U.S. State Privacy Laws: Compliance Thresholds, Requirements, Rights, and Enforcement

This guide covers the landscape of U.S. state privacy laws. Which states have laws to date, what they typically require, and how thresholds, penalties, and opt-out...

Kenya Data Protection Act

Kenya’s Data Protection Act came into effect on November 25, 2019, and is now the primary law on data protection in the country. It gives effect to article 31 in the constitution of Kenya that stipulates privacy as a fundamental right. Like is...

APPI Japan

Japan’s wide-ranging Act on the Protection of Personal Information (APPI) was passed in 2003 and amended in 2015 and again in 2020. Not unlike many other data privacy laws, its purpose is to protect an individual’s rights and interests while also considering the utility of personal...

Everything you need to know about Shopify cookies: types, consent required, and how to comply

If you have a Shopify website, you need to know what cookies are essential, how to manage them, and how to communicate your...

PIPA - South Korea’s Personal Information Protection Act

South Korea’s wide-ranging Personal Information Protection Act (PIPA) was passed on September 30, 2011, making the country one the world’s strictest privacy regimes. Like many other comprehensive...

Canada’s PIPEDA

Canada’s PIPEDA is a federal data privacy law governing the gathering, use and disclosure of personal information for commercial use in the country. PIPEDA compliance requires you to obtain meaningful consent from users in order to collect and use their data, and the law...

Is Google Analytics 4 GDPR compliant?

Find out if Google Analytics 4 is GDPR compliant and what steps you can take to ensure that your website analytics are in line with data protection regulations.

Google Consent Mode

PDPA Thailand

Thailand’s Personal Data Protection Act (PDPA) regulates the processing of personal data for commercial use. It applies to any company, organization or website located inside Thailand and for businesses with users in Thailand. The PDPA Thailand explicitly requires you to...

UK GDPR after Brexit

The United Kingdom left the EU on January 1, 2021. When the UK was still a part of the European Union, the EU's General Data Protection Regulation (GDPR) applied domestically. However, since the country has left the bloc, how the GDPR works has changed inside the UK. In...

New Zealand’s Privacy Act 2020

New Zealand’s Privacy Act 2020 and the NZ Privacy Principles require you to inform users located inside New Zealand about your website’s use of cookies and trackers, as well as how you are processing their personal information, and...

Data Protection Act Malaysia (PDPA)

Malaysia’s Personal Data Protection Act (PDPA) regulates the processing of personal data for commercial use inside the country. It applies to any website, company or organization located inside Malaysia. Malaysia’s PDPA requires you to...

No more cookies? Google ending third-party cookies in Chrome

Google started to phase out third-party cookies for all Chrome users in 2024, but advertisers and publishers will still need to obtain consent to process user data. Learn how to prepare for the end of...

Google Consent Mode

PDPA - Personal Data Protection Act Singapore

Singapore’s Personal Data Protection Act (PDPA) took effect in 2014 but was amended in October 2020 to include, among other additions, changes to its consent framework. In this blogpost, we break down Singapore’s PDPA – its rights,...

What is website tracking and can it align with data privacy laws?

Website tracking offers valuable insights, but it raises concerns about user privacy and regulatory requirements. We explore how websites can implement tracking effectively while respecting privacy laws...

Google Consent Mode

EDPB Guidelines and Cookie Walls

The European Data Protection Board (EDPB) has adopted guidelines for GDPR compliance, clarifying what constitutes valid consent on websites and ruling the use of “cookie walls” illegal. EDPB is the highest supervisory authority on the GDPR...

Schrems II and beyond: EU-US international data transfers

The Schrems II decision in 2020 struck down the Privacy Shield that enabled data transfers from the EU to the US. We look at this landmark ruling, its immediate impact on transatlantic data transfers,...

Google Consent Mode

Google Consent Mode is a ground-breaking new feature that makes consent the defining condition for how Google Analytics and Google Ads run. Cookiebot CMP is ready and fully integrated.

Google Consent Mode

POPIA: Compliance with South Africa’s data protection law

We break down South Africa’s Protection of Personal Information Act (POPIA) — its key provisions, rights, requirements, and how Cookiebot consent management platform (CMP) can help you achieve compliance.

GDPR cookies, consent, and compliance

Your website is required under the EU’s General Data Protection Regulation (GDPR) to let users from inside Europe control the activation of cookies and trackers that collect their personal data. This is the crux of GDPR cookie compliance – and...

Google Consent Mode

CCPA Privacy Policy: Requirements and Best Practices

What does a CCPA-compliant privacy policy look like? We examine what the California data privacy law requires, and how to create a valid CCPA privacy policy.

Privacy Policy and Cookies in Australia - Cookiebot

Australia Privacy Policy and Cookies

Australia’s Privacy Act and its Australian Privacy Principles (APP) require a website to have an updated privacy policy (known as APP privacy policy) that informs users of how it collects and handles personal information. In this blogpost, we look at...

California Consumer Privacy Act (CCPA)

On August 14, 2020, the final CCPA regulations were approved and took effect immediately. This means that enforcement of the CCPA can now go ahead with the Attorney General’s Office as the lead supervisor. In this blogpost, a...

CCPA - California Consumer Privacy Act

California Consumer Privacy Act (CCPA) took effect on January 1, 2020. It empowers California residents with new rights over the data they generate every day, and forces companies who do business in the state to play by new rules. So...

Automatic Cookie Consent

We have dramatically simplified the implementation of ‘prior consent’ on your website, so that the blocking of trackers right from the moment that the user lands on your website now has become automatic. This is a ground-breaking and unique improvement in the field of consent...

Planet49 and EU GDPR

On October 1, 2019, the highest legal entity of the EU, the Court of Justice of the European Union (CJEU), ruled in the case of Planet49 that the only form of valid consent for processing user data in the EU is explicit consent, i.e. consent that is actively and specifically given by...

California Consumer Privacy Act (CCPA)

California was one of the first states in the US to enshrine privacy as an “inalienable right” of all people, when it amended its constitution in 1972. On January 1, 2020, California became the first state to enact a data privacy law...

CCPA and Cookies: Privacy Compliance Support for California-Facing Websites

Cookies and similar tracking technologies qualify as personal information under the CCPA/CPRA when they act as unique...

EDPB and Cookie Walls

A cookie wall is a way for websites to deny users access if they don’t consent to all cookies and trackers present on that website. However, the European Data Protection Board’s (EDPB) Guidelines on consent from May 2020 rule out cookie walls as a valid way for websites of...

GDPR after Brexit

Brexit happened. The United Kingdom left the European Union on January 1, 2021. Post Brexit, the GDPR will come to mean several things in the UK, as new domestic data laws will take effect. In this blogpost, we give you an overview of what is changing and what will remain the same...

Google Analytics and CCPA: Support for Privacy Compliance in 2026

Google Analytics 4 assigns every visitor a Client ID, which qualifies as personal information under the CCPA/CPRA, even without a name or email address. This...

CCPA vs. GDPR: 10 Key Differences and How to Comply With Both

This guide compares the CCPA and GDPR side by side, covering who each law applies to, how consent and data rights differ, and what penalties look like for noncompliance. It's written for U.S.

What Is Personal Information Under the CCPA?

The CCPA/CPRA defines personal information broadly enough to cover cookies, IP addresses, and inferred data, not just names and emails. This guide breaks down the categories of personal information...

How the GDPR affects the USA and how US websites can enable compliance | Cookiebot

GDPR USA

In this blogpost, we look at how the GDPR affects the USA and how US websites can enable compliance with the EU data law through consent management platforms like Cookiebot CMP. We also take a critical look at the tech industry’s narrative of “technological evolution”, in which...

CCPA Consumer Rights: Business Requirements in 2026

This guide covers all eight CCPA and CPRA consumer rights that apply to businesses handling California residents' personal information, from the right to know and delete to the newer automated...

Nevada Privacy Law: Consumer Rights and Compliance

Consumer rights and compliance under Nevada privacy law

Nevada was one of the first states to enact privacy laws, though limited in scope, and to enable its residents to opt out of having their data sold. We look at the Nevada data privacy laws, how they've...

10 of the best Consent Management Platforms (CMPs) compared

User consent is crucial to complying with privacy regulations like the GDPR and CCPA. But consent has to be obtained, stored, and signaled in the right way. This emphasizes the need for companies to...

UK Data Protection Act 2018 (DPA)

The Data Protection Act 2018 (DPA ACT) is a domestic law governing the use of personal data and the flow of information in the United Kingdom. The UK is no longer part of the EU and a new and amended Data Protection Act has taken...

TCF v2.4: Requirements and Deadlines for the IAB Transparency and Consent Framework

The IAB's Transparency and Consent Framework has moved to TCF v2.4, adding multi-device consent flexibility, new Feature disclosures, and a renamed Special...

IAB CCPA Compliance Framework

California Consumer Privacy Act (CCPA) took effect on January 1, 2020. Compliance with the new California privacy law means that businesses must implement new procedures for how they collect and sell personal information. The IAB CCPA...

What is Google Tag Manager, and how does it work with the General Data Protection Regulation (GDPR) and cookie consent?

With Cookiebot CMP, you can easily make your use of Google Tag Manager GDPR...

Google Consent Mode

What is a cookie notice and why do you need one?

Transparency about data use builds trust between a website’s operator and its users, between the people and “the Internet”. The intersection of this manifests with the cookie notice, cookie banner, or cookie pop-up. Being...

How to Meet CCPA Compliance Requirements (Checklist Included)

A practical, step-by-step guide to CCPA and CPRA compliance for U.S. businesses, covering data security, consumer notices, opt-out rights, and 2026 audit and ADMT rule changes, plus a free eight-step...

EU GDPR and Privacy Laws

The EU privacy laws consist of the General Data Protection Regulation (GDPR) and the Electronic Privacy Directive (ePD), also known as the ePrivacy Directive or simply the “EU cookie law”. They control the flow of data on the EU continent and form the strongest data protection framework in...

UK GDPR: An Overview and Compliance Support Guide

The UK left the EU on December 31, 2021. After Brexit, the UK is no longer regulated domestically by the European General Data Protection Regulation (GDPR), which governs processing of personal data from inviduals inside the EU. Instead,...

NOYB cookie banner complaints

On May 31 2021, privacy group NOYB led by Max Schrems filed over 500 draft complaints to websites in the EU for using unlawful cookie banners. Using a new tool that can determine the GDPR compliance of a website’s consent flow,...

Cookie Consent Solution

A sense of dizziness might occur when the dimensions of online privacy issues are reflected on. It’s understandable to feel both disoriented and defenseless. A cookie solution is a vital, local tool to take back control of our online lives from big third-party ad tech companies, but...

Cookie Control

If you think clearing your browser cookies is enough to prevent you from being monitored, think again. The tracking industry is always coming up with new methods, and now it’s even possible to recognise users via hidden ultrasound signals in ads and browser shadow data.

Why choose Cookiebot CMP?

Cookiebot CMP launched out of Denmark in 2012 on a mission to protect privacy and make the Internet a safe and respectful environment based on transparency and consent. Today, Cookiebot CMP is the world’s leading consent management...

Cookiebot CMP App in HubSpot App Marketplace

Hubspot GDPR and CCPA Compliance

HubSpot helps you manage your inbound marketing with a detailed insight into your existing and potential customers. With the Cookiebot CMP App in HubSpot, your website can become GDPR and CCPA compliant.

What you need to know about cookie compliance globally and how to become compliant

If you own a website that collects data from visitors, which most do, you most likely need to comply with cookie laws and consent regulations. Here’s how to become...

GDPR fines and warnings

ONE YEAR has passed since the European GDPR (General Data Protection Regulation) came into effect on May 25, 2018. A helicopter view of the situation a year later reveals both challenges and promises to its enforcement and effects. Here is a GDPR anniversary update!

Cookiebot GDPR compliance report

When EU citizens visit their governments online, or when they access public health service resources about sensitive issues such as pregnancy, sexual health, cancer or mental illness, more than 100 commercial companies are systemically and...

Cookie policy texts

Your website uses cookies and other tracking technologies. This is no secret; pretty much all websites do. But how you choose to communicate this fact to your users makes a world of difference.

Cookie Scanner

The Internet has more dimensions than you can see. Even your own website has dimensions that are not immediately visible to you, and in these secret grey spaces hide trackers and intruders that see everything and remember all. Here, no privacy exists. But there is a way to...

Cookie Scripts

If you are not a developer, as I am not, the best way to understand this tech world is sometimes through metaphors. They risk simplifying things, sure, but they also lend us perspective on the rampant surveillance capitalism of the ad tech industry that can otherwise be hard to...

Cookie disclaimers vs. cookie consent

Cookie disclaimers and cookie banners are not the same thing. Sure, you could use the words interchangeably, but there’s a big difference between the two when it comes to compliancy with the existing European data protection law – the General...

Google sets industry standard on cookie consent

Google now requires full cookie compliance of all ad partners and points at Cookiebot CMP as a solution. Meanwhile, thousands of Italian websites has taken Cookiebot CMP in use since June, when the authorities...

Cookie Control

Efforts to regulate online surveillance and protect digital privacy has crystalized in the EU as the General Data Protection Regulation (GDPR), and in the US as the California Consumer Privacy Act (CCPA). In this blogpost, we look at cookie control in the EU and US, including...

Blog

Curated articles

Subscribe to our newsletter

Browse all

Download the CMP integration for your preferred CMS

Usercentrics Cookiebot plugin for WordPress

Usercentrics for Wix