Usercentrics blog

Our comprehensive guide explains how the California Consumer Privacy Act (CCPA) applies to businesses in and outside the state and how it impacts their data processing activities. We explore legal definitions, consumer rights, compliance requirements, and outline what changes with the 2025 updates.

As cookies disappear, marketers will no longer be able to rely on third-party data. We explore what’s driving the shift, why it matters, and how to rethink data collection, targeting, and measurement for long-term resilience.

The French data protection authority, CNIL, enforces strict rules around obtaining valid user consent. This article explores how CNIL cookie requirements can impact marketing strategies, and outlines eight principles essential to achieving and maintaining compliance.

The EU’s Digital Omnibus Package streamlines the GDPR, ePrivacy, NIS2, DORA, and the AI Act by reducing overlap, unifying incident reporting, and simplifying consent rules. It introduces single-click consent, browser-level preference signals, clearer AI training rules, and a single reporting portal, with enforcement expected from 2026.

While Google is no longer phasing out third-party cookies in Chrome, the broader shift away from third-party cookie tracking is still underway. In this guide, we explain how third-party cookies are used in marketing, why they’ve become increasingly problematic, what this means for privacy-led marketing, and better alternatives for today and as the digital and regulatory landscapes evolve.

Find out what a GDPR data controller is, how controllers differ from processors, and why decision-making power matters. We look at core responsibilities, joint controllership, common misclassification risks, and practical GDPR compliance steps, with emphasis on accountability, consent management, and enforcement focus.

The Global Privacy Control (GPC) is an initiative to give individuals control over their personal data online and standardize signaling of consent preferences. It offers a universal opt-out signal for data privacy preferences and can automate opt-in or out of the use, sale, or sharing of users’ data.