Usercentrics blog

Four August 2026 court decisions on the California Invasion of Privacy Act (CIPA) show courts reading cookie banners and privacy policies together, then comparing both with what a website actually does. Where the three diverge, consent arguments may weaken. This article summarizes the decisions, sets out what courts now appear to expect, and outlines practical steps for privacy and legal teams.

The UK’s Data (Use and Access) Act 2025 (DUAA) is now in force, with most provisions commenced on February 5, 2026, the complaints requirement on June 19, 2026, and the ICO’s governance reforms on September 30, 2026. This guide covers the key privacy compliance changes for businesses. Those include the new recognised legitimate interests lawful basis, updated cookie and PECR rules, automated decision-making reform, expanded ICO enforcement powers, and fines now aligned with UK GDPR levels of up to four percent of global annual turnover.

Managing Google Tag Manager cookie consent and GDPR compliance is important for businesses operating in the EU, UK, and Switzerland. Here’s what you need to know about Google Tag Manager, cookie consent, and the GDPR.

Enforcement of data privacy regulations is ramping up in the United States as more such laws come into force. We look at six class action lawsuits filed in California and dig into the alleged violations, how consent management was involved, and how companies can achieve better data and privacy compliance.

There are exciting opportunities ahead for web developers who adapt to the Digital Markets Act (DMA). Learn about the role of web developers in enabling DMA compliance for clients, and how Usercentrics can equip you with the tools and resources you need.

Originally a 1967 wiretapping law, CIPA is now central to a surge of U.S. privacy litigation targeting websites that deploy cookies, pixels, and session replay tools without prior user consent. We look at CIPA’s legal framework, key sections, how it differs from the CCPA, compliance, penalties, and how a consent management platform can reduce exposure.

The European Union’s Data Act sets new rules to regulate the way data holders and users can manage and use the vast amounts of data generated from connective devices. We look at what this means for personal and non-personal data sharing, and the obligations laid down by the regulation.

Usercentrics DSR is now live, available on all paid plans. Visitors can submit CCPA/CPRA and GDPR data subject requests directly through your CMP via a web form. No new vendor, integration, or added cost. This article covers what is included, how it works, and why response deadlines and penalties make this a timely addition for enterprise privacy teams.

La Loi 25 exige un consentement manifeste, libre, éclairé et donné à des fins spécifiques avant de recueillir des renseignements personnels.

This article explains what a consent management platform (CMP) is, how it differs from a cookie banner, and why regulatory requirements worldwide make one necessary. It covers choosing the right consent framework, the growing importance of multi-jurisdiction compliance, and staying audit-ready over time. For teams evaluating their first CMP or reassessing their current setup.