Compliance
Practical guidance on meeting data protection requirements across jurisdictions, from implementation steps to ongoing compliance management. Learn how to audit your website for compliance gaps, set up proper consent mechanisms, maintain documentation, and prepare for regulatory inspections and enforcement actions.
Intercom, Drift, and Live Chat Cookies: Do Chat Widgets Need Consent?
Live chat widgets set cookies that track visitors, store conversations, and identify returning users. Under GDPR and the ePrivacy Directive, most of these cookies require prior consent before they load on your site.
LinkedIn Insight Tag and GDPR: A Setup Guide for Compliant Tracking
The LinkedIn Insight Tag fires tracking cookies the moment it loads, making consent-based loading essential under GDPR. This guide covers how to block the tag until consent is granted, which cookies it sets, and how the Conversions API offers a more privacy-resilient alternative.
Kentucky Consumer Data Protection Act (KCDPA): A New Privacy Law for 2026
Kentucky's Consumer Data Protection Act became enforceable on 1 January 2026, making it the sixteenth US state to adopt a comprehensive privacy law. Modelled on Virginia's VCDPA, the KCDPA follows an opt-out framework with opt-in consent required for sensitive data processing.
Indiana Consumer Data Protection Act (ICDPA): What Changed on 1 January 2026
Indiana's consumer data protection law became enforceable on 1 January 2026, granting residents opt-out rights over targeted advertising, data sales, and profiling. If your website collects personal data from Indiana residents, you need to understand the thresholds, rights, and obligations the ICDPA introduces.
HubSpot Tracking Code and GDPR: How to Conditionally Load Analytics
HubSpot's tracking code sets several analytics cookies that require consent under GDPR and the ePrivacy Directive. This guide covers every HubSpot cookie, explains how to block tracking until visitors opt in, and walks through integration with external consent management platforms.
How to Honour GPC Signals on Your Website: A Technical Implementation Guide
Global Privacy Control is now legally binding in California, Colorado, Connecticut, and other US states. This guide covers how to detect the Sec-GPC header server-side, read the navigator.globalPrivacyControl property client-side, and integrate GPC signal handling with your consent management platform.
How to Conduct a Cookie Audit: A Step-by-Step Methodology
A cookie audit identifies every cookie and tracking technology on your website, categorises each one by purpose, and documents whether consent is required. This guide walks through the full methodology, from initial scanning to ongoing monitoring.
Hotjar and Cookie Consent: Session Recordings, Heatmaps, and Privacy
Hotjar records visitor sessions, generates heatmaps, and sets several first-party cookies on your domain. Every one of those cookies falls outside the strictly necessary category, which means you need explicit consent before the tracking code fires. This guide covers the specific cookies Hotjar sets, the legal basis for processing, and how to load the script only after your visitors say yes.
GPC vs Cookie Banners: Do You Still Need a Consent Banner If You Support GPC?
Supporting Global Privacy Control on your website does not mean you can remove your cookie consent banner. GPC acts as an opt-out signal under US state privacy laws, but GDPR and the ePrivacy Directive still require prior opt-in consent for non-essential cookies.