Data Privacy & RegTech News

Server-Side Tagging and Tracking: Why GDPR Consent Still Applies

Moving tags to your own subdomain or a path on your main domain doesn't remove GDPR consent. Where server-side setups leak and how to pass consent to every tag.

Apple ATT EU Prompt in iOS 27.2: How to Order CMP and ATT Before December

iOS 27.2 brings a new ATT prompt, mandatory in Germany, France, Italy, Poland and Romania. How to show your CMP first and update the ATT purpose text.

CNIL Fines Fnac Darty €7 Million for App Tracking After Users Refused Consent

CNIL fined Fnac Darty €7 million after its app kept sending browsing data to a recommendation service when users refused consent. How to check your own setup.

ChatGPT Ads and Consent: What Advertisers Need from Their CMP

ChatGPT Ads now run in Europe. OpenAI asks users for consent before personalising ads, but conversion tracking on your own site is your responsibility, and OpenAI's pixel measures by default. How to add ChatGPT Ads to your consent banner with UniConsent.

Digital Omnibus Cookie Rules: Consent-Free Uses and the 4-Month Re-Ask Wait

The EU Council agreed its Digital Omnibus position on 21 October 2026. Cookies stay under the ePrivacy Directive, six uses would no longer need consent, and sites would wait four months before asking again after a refusal. What publishers and marketers should do now.

Proof of Consent Beyond the Cookie Banner: Recording Consent From Forms, Preference Centres and Apps

Consent is given in sign-up forms, preference centres and mobile apps, not only in cookie banners. How to keep one consent record across all of them, and how UniConsent custom purposes and the Consent DB make proof of consent easier.

UKGC SR Code 5.1.12: Gambling Direct Marketing Opt-ins by Product and Channel

UK Gambling Commission SR code 5.1.12 requires remote operators to offer unticked direct marketing opt-ins for betting, casino and bingo, by email, SMS and phone. What it requires, how it changes your CRM and how to keep proof of consent.

Consent Sync for Klaviyo, Segment, Braze and Brevo: Keep Email Tracking Consent in Step With Your CMP

When a subscriber withdraws email tracking consent in your consent banner, your email platform needs to know. How UniConsent passes consent changes to Klaviyo, Segment, Braze and Brevo, and what to set up on each side.

Email Tracking Pixel Consent: How to Ask for Open Tracking Separately From Your Newsletter Sign-up

Email tracking pixels need consent under GDPR and ePrivacy, and the CNIL says it must be separate from newsletter consent. What the rules say, how to design the sign-up flow and how to keep proof of consent.

Washington My Health My Data Act Consent Requirements: A Checklist for Health and Wellness Brands

The Washington My Health My Data Act (RCW 19.373) requires separate opt-in consent to collect and to share consumer health data, with a private right of action. A practical consent checklist for ecommerce, apps and adtech.

IAB TCF 2.4 Deadline and How to Check Your Vendors

IAB TCF 2.4 has applied to websites since October 23, 2026 and applies to mobile apps and CTV from February 23, 2027. What publishers and marketers need to know, which ad tech vendors are affected, and how to check they keep working.

NFL.com CIPA Lawsuit: When Opting Out Doesn't Stop Tracking — How to Make Opt-Outs Actually Work

A class action against NFL Enterprises claims NFL.com ran 182 third-party trackers before visitors made any consent choice, and 186 after they opted out. What the CIPA claims mean for US privacy compliance and how consent management closes the gap.

First-Party CMP Domain: Serve Your Consent Banner from Your Own Domain

Serving your CMP from a first-party subdomain improves consent rates, reduces repeated consent prompts, and keeps consent cookies persistent across all browsers including Safari.

UniConsent Is a Certified Microsoft UET CMP and Microsoft Clarity CMP

UniConsent is officially certified as both a Microsoft UET (Universal Event Tracking) CMP and a Microsoft Clarity CMP, enabling advertisers and website owners to manage consent seamlessly across Microsoft's advertising and analytics platforms.

UK GDPR Right to Complain: Changes on June 19, 2026 and What Organisations Must Do

From June 19, 2026, individuals can lodge data protection complaints directly with organisations under a new UK GDPR provision. Here is what the right requires, how complaint handling processes must change, and what to put in place before the deadline.

Prebid.js CMP Setup: Passing TCF, GPP, and CCPA Consent to Your Header Bidding Stack

How to configure the Prebid.js consent management modules with a certified CMP - consentManagementTcf, consentManagementGpp, and consentManagementUsp - so every bidder receives valid GDPR, US state, and CCPA signals, and how to verify the strings bidders actually see.

The Best Consent Management Platform 2026: UniConsent vs Usercentrics vs Cookiebot vs Didomi vs OneTrust

Why UniConsent leads the 2026 CMP comparison against Usercentrics, Cookiebot, CookieYes, Didomi, and OneTrust - TCF 2.3 and TCF Canada certification, Google Consent Mode v2, certified Microsoft UET support, GPP, Prebid, mobile SDKs, and pricing you can verify before you buy.

Shopify Consent Mode v2 Guide: From Customer Privacy API to Google Ads, GA4, and Microsoft UET

How consent flows through a Shopify store end to end - the Customer Privacy API, a certified CMP banner, Google Consent Mode v2 for GA4 and Google Ads, and Microsoft UET Consent Mode - why script blocking alone leaves Shopify's own tracking non-compliant, and how to wire the whole pipeline with one app install.

Microsoft Advertising Adds Vietnam as Consent-Enforced Market: What Advertisers Need to Do Before June 30, 2026

Microsoft Advertising is adding Vietnam as a consent-enforced market by June 30, 2026. Learn what this means for your ad campaigns and how to maintain ad revenue with compliant consent collection.

CIPA Pixel Tracking: European Wax Center's $5M Settlement Shows Why Your CMP Must Gate Tags Before Consent

European Wax Center agreed to a $5 million class action settlement after its website fired Meta, Snap, LinkedIn, and Attentive pixels without visitor consent. The case shows how wiretapping statutes now apply to standard marketing pixels.

Allison v. PHH Mortgage: Opt-Out Does Not Mean Unmanaged — Why CCPA Tracking Pixels Still Need a CMP

After Allison v. PHH Mortgage, CCPA's opt-out framework still requires real-time pixel suppression, accurate notice, and proper vendor classification. Here is why a consent management platform is essential even when opt-in consent is not required.

US Privacy 2026: State Laws, FTC Actions, and Class Action Risk

The 2026 guide to US privacy fines covering 20 state laws, FTC enforcement, CIPA class actions, and the failure modes behind almost every major penalty.

GDPR Enforcement and Fines 2026: Business Categories, Top Cases, and Country

Over 2,500 GDPR fines totalling more than 7 billion euros since 2018. Explore the top cases, country rankings, ad tech enforcement patterns, and what they mean for your business in 2026.

CIPA Lawsuits 2026: How Pre-Consent Tracking Is Exposing Website Operators

CIPA Section 631 and 638.51 lawsuits are targeting websites that fire tracking pixels before consent, ignore opt-out signals, or run cookies with no disclosure at all. Learn the three plaintiff theories and how to audit your tag setup.

CNIL Issues Formal Guidance on Email Tracking Pixels: Email Marketing Compliance Requirements

France's CNIL published its first formal recommendation on email tracking pixels in April 2026, clarifying when consent is required and how organizations must comply with GDPR and ePrivacy rules.

Google Consent Mode June 2026 Update: Unified Control for All Google Ads Data

Google is moving all Google Ads data controls to Consent Mode on June 15, 2026. Here is what changes with ad_storage, Google Signals, and ad personalization, and what to do before the deadline.

UniConsent Mobile SDK: Sync Native Consent to WebViews

UniConsent's Mobile SDK syncs native app consent to embedded WebViews on iOS, Android, Flutter, and React Native, so users are not shown a consent banner twice.

UniConsent Consent Audit Trail: Log, Search, and Export Consent Records

UniConsent's Consent Audit Trail add-on captures timestamped consent events, supports authenticated user ID search, and exports records as CSV or JSON for regulatory audits.

UK DUAA: UK Data (Use and Access) Act 2025

The UK Data (Use and Access) Act 2025 received Royal Assent on 19 June 2025, streamlining UK GDPR rules. Learn about the key changes and what they mean for your compliance obligations.

US CCPA: Ford to Pay $375K Fine for Adding Friction to Opt-Out Process

Ford Motor Company fined $375,703 by the California Privacy Protection Agency for requiring email verification before processing consumer opt-out requests, violating the CCPA Opt-Out Rule.