Cookie Gate
LightNews LightNews
banner
cookiegate.org
Cookie Gate
@cookiegate.org
34 followers 41 following 41 posts
Independent intelligence on cookie consent, CMPs and privacy law.
Glossary, vendor directory and webinars at cookiegate.org
Posts Replies Media Videos
Pinned
cookiegate.org
Cookie Gate @cookiegate.org · 22d
Cookie Gate: Independent intelligence on cookie consent, CMPs and privacy law.

Here we share terms from our glossary, plus our vendor directory and webinars.

cookiegate.org

#privacy #GDPR
cookiegate.org
CPPA's GPC Proposal: A Readiness Checklist

#privacy #GDPR
CPPA's GPC Proposal: A Readiness Checklist
The CPPA's GPC proposal introduces stricter opt-out rules and reporting. This checklist guides businesses in aligning their compliance strategies effectively.
cookiegate.org
November 4, 2026 at 8:01 PM
cookiegate.org
Term of the day: Behavioural Advertising

Behavioural advertising is the practice of showing people ads based on their browsing activity and interests, tracked over time and often across different websites or...

Full definition: cookiegate.org/glossary/behavioural-advertising

#privacy #GDPR
Behavioural Advertising. Behavioural advertising is the practice of showing people ads based on their browsing activity and interests, tracked over time and often across different websites or platforms. Rather than choosing ads based only on the page a person is currently viewing, advertisers build a picture of a user's inferred interests from their past behaviour. In most EU jurisdictions this typically involves tracking technologies that require the user's prior consent before they are used.
November 4, 2026 at 4:02 PM
cookiegate.org
Pseudonymisation Pipelines That Hold Up Under Scrutiny

#privacy #GDPR
Pseudonymisation Pipelines That Hold Up Under Scrutiny
Explore how robust pseudonymisation pipelines support GDPR compliance and data governance amid AI and connected device data challenges.
cookiegate.org
November 3, 2026 at 8:01 PM
cookiegate.org
Term of the day: Basic Consent Mode

Basic Consent Mode is one of two ways to set up Google's consent mode, a feature that adjusts how Google tags behave based on whether a visitor has given consent. In this basic...

Full definition: cookiegate.org/glossary/basic-consent-mode

#privacy #GDPR
Basic Consent Mode. Basic Consent Mode is one of two ways to set up Google's consent mode, a feature that adjusts how Google tags behave based on whether a visitor has given consent. In this basic version, Google tags are held back and do not load or send any data until the visitor grants the relevant consent. This differs from the advanced version, which loads tags earlier but limits what they send before consent is given.
November 3, 2026 at 4:01 PM
cookiegate.org
DMA and GDPR Overlap: What the EDPB Is Signaling to Counsel

#privacy #GDPR
DMA and GDPR Overlap: What the EDPB Is Signaling to Counsel
The EDPB's focus on DMA and GDPR overlap reveals key compliance challenges for tech giants, emphasizing the need for integrated privacy and regulatory strategies.
cookiegate.org
November 2, 2026 at 8:01 PM
cookiegate.org
Term of the day: Automated Rescan

An automated rescan is a repeat scan of a website that runs automatically, rather than being started by hand each time, to check for cookies, trackers, or other issues. In a cookie...

Full definition: cookiegate.org/glossary/automated-rescan

#privacy #GDPR
Automated Rescan. An automated rescan is a repeat scan of a website that runs automatically, rather than being started by hand each time, to check for cookies, trackers, or other issues. In a cookie compliance context, it is typically used to re-check a site after changes have been made, so an organization can confirm whether previously flagged problems still appear. It is a supporting tool for monitoring and does not by itself determine whether a site is legally compliant.
November 2, 2026 at 4:01 PM
cookiegate.org
Five Processor BCR Mistakes Your DPO Team Should Avoid

#privacy #GDPR
Five Processor BCR Mistakes Your DPO Team Should Avoid
Processor Binding Corporate Rules require precise coordination across teams. Avoid five key mistakes that can delay approval and raise regulatory concerns under CSC oversight.
cookiegate.org
November 1, 2026 at 8:01 PM
cookiegate.org
Term of the day: Automated Decision-Making Rights

Automated decision-making rights are protections that let individuals object to, or avoid being subject to, decisions made about them purely by computers...

Full definition: cookiegate.org/glossary/automated-decision-making-rights

#privacy #GDPR
Automated Decision-Making Rights. Automated decision-making rights are protections that let individuals object to, or avoid being subject to, decisions made about them purely by computers without meaningful human involvement, particularly where those decisions have significant effects on them. In the EU and UK, these rights generally give people the ability not to be subject to such solely automated decisions in certain circumstances, while many US state privacy laws instead tend to offer a right to opt out of profiling based on automated processing. The precise scope and how these rights apply depend on the applicable law and the facts of each case.
November 1, 2026 at 4:01 PM
cookiegate.org
Five Myths About "Publicly Available Information" in State Privacy Laws

#privacy #GDPR
Five Myths About "Publicly Available Information" in State Privacy Laws
State privacy laws vary in defining publicly available information, making uniform compliance tricky. Misclassifying data risks regulatory and legal challenges.
cookiegate.org
October 31, 2026 at 7:01 PM
cookiegate.org
Term of the day: Authorized Agent

An authorized agent is a person or organization that a consumer designates to submit privacy rights requests on their behalf, such as requests to access, delete, or correct their...

Full definition: cookiegate.org/glossary/authorized-agent

#privacy #GDPR
Authorized Agent. An authorized agent is a person or organization that a consumer designates to submit privacy rights requests on their behalf, such as requests to access, delete, or correct their personal information. This concept appears in certain US state privacy laws, notably California's CCPA. Using an authorized agent lets someone exercise their privacy rights without contacting a business directly themselves.
October 31, 2026 at 3:01 PM
cookiegate.org
CNIL's €7M FNAC Fine: What Went Wrong in Mobile Consent

#privacy #GDPR
CNIL's €7M FNAC Fine: What Went Wrong in Mobile Consent
CNIL fined FNAC €7 million for collecting browsing data via their mobile app without valid consent, underscoring the importance of robust mobile consent systems.
cookiegate.org
October 30, 2026 at 7:01 PM
cookiegate.org
Term of the day: Authentication Cookies

Authentication cookies are small pieces of data stored in a user's browser that let a website recognize that a person is logged in and identify which account they are using...

Full definition: cookiegate.org/glossary/authentication-cookies

#privacy #GDPR
Authentication Cookies. Authentication cookies are small pieces of data stored in a user's browser that let a website recognize that a person is logged in and identify which account they are using. Without them, a site would generally not be able to keep a user signed in as they move from page to page. Because they are tied to a function the user has actively requested, they are often treated as strictly necessary and are commonly permitted even where a visitor has not consented to broader data collection.
October 30, 2026 at 3:01 PM
cookiegate.org
BCRs Under Article 64: The EDPB Opinion Process

#privacy #GDPR
BCRs Under Article 64: The EDPB Opinion Process
Explore how the EDPB's Article 64 opinion process shapes Binding Corporate Rules approval for compliant cross-border data transfers under GDPR.
cookiegate.org
October 29, 2026 at 7:01 PM
cookiegate.org
Term of the day: Article 9 Conditions

Article 9 conditions are the specific exceptions under EU and UK data protection law that allow organisations to process especially sensitive personal data, which is otherwise...

Full definition: cookiegate.org/glossary/article-9-conditions

#privacy #GDPR
Article 9 Conditions. Article 9 conditions are the specific exceptions under EU and UK data protection law that allow organisations to process especially sensitive personal data, which is otherwise generally prohibited. This sensitive data includes information such as health, biometric, or genetic data, and each condition sets out a particular situation in which processing is permitted. Meeting one of these conditions is separate from, and additional to, the general legal basis needed to process any personal data.
October 29, 2026 at 3:02 PM
cookiegate.org
The Cross-Border Certification Myth: Why Compliance Isn't Your Real Problem

#privacy #GDPR
The Cross-Border Certification Myth: Why Compliance Isn't Your Real Problem
China's Final Cert Guideline shifts focus from certification to operational consent infrastructure and cross-entity data controls for multinational companies.
cookiegate.org
October 28, 2026 at 7:00 PM
cookiegate.org
Term of the day: Article 6 Lawful Basis

An Article 6 lawful basis is one of the legally recognised reasons an organisation must have before it can process personal data under the GDPR. At least one of these bases...

Full definition: cookiegate.org/glossary/article-6-lawful-basis

#privacy #GDPR
Article 6 Lawful Basis. An Article 6 lawful basis is one of the legally recognised reasons an organisation must have before it can process personal data under the GDPR. At least one of these bases must apply to any given processing activity, and one of the available options is the individual's consent. Without a valid lawful basis, processing personal data is generally unlawful in the EU and UK.
October 28, 2026 at 3:01 PM
cookiegate.org
GDPR Web Scraping Checklist for Generative AI Training

#privacy #GDPR
GDPR Web Scraping Checklist for Generative AI Training
The 2026 GDPR guidelines define when web scraping counts as personal data processing for AI training. This checklist helps ensure compliance with legal bases and data rights.
cookiegate.org
October 27, 2026 at 7:01 PM
cookiegate.org
Term of the day: Article 5(3) ePrivacy Directive

Article 5(3) is the provision of the EU's ePrivacy Directive that generally requires organisations to obtain a user's consent before storing information on...

Full definition: cookiegate.org/glossary/article-53-eprivacy-directive

#privacy #GDPR
Article 5(3) ePrivacy Directive. Article 5(3) is the provision of the EU's ePrivacy Directive that generally requires organisations to obtain a user's consent before storing information on, or gaining access to information already stored on, their device, for example when placing cookies. It is the main legal basis in the EU for cookie consent requirements, and it applies to a range of tracking technologies beyond traditional cookies. In most cases consent is required unless a limited exemption applies, such as for strictly necessary functions.
October 27, 2026 at 3:01 PM
cookiegate.org
Data Anonymisation Assessment Template

#privacy #GDPR
Data Anonymisation Assessment Template
A comprehensive template to assess dataset anonymisation against GDPR standards, documenting techniques and residual re-identification risks for compliance.
cookiegate.org
October 26, 2026 at 7:01 PM
cookiegate.org
Term of the day: Analytics Cookies

Analytics cookies are small files placed on a user's device to measure how people use a website, such as how many visitors arrive and which pages they view. Website operators use this...

Full definition: cookiegate.org/glossary/analytics-cookies

#privacy #GDPR
Analytics Cookies. Analytics cookies are small files placed on a user's device to measure how people use a website, such as how many visitors arrive and which pages they view. Website operators use this information to understand visitor behaviour and improve their sites. Because they are not strictly necessary to deliver a service a user requests, they generally require the user's prior consent in most EU jurisdictions.
October 26, 2026 at 3:01 PM
cookiegate.org
CNIL's EUR 500K Healthcare Fine Reveals Access Control Gaps

#privacy #GDPR
CNIL's EUR 500K Healthcare Fine Reveals Access Control Gaps
CNIL fined a French hospital EUR 500K after a breach exposed over 700,000 patient and third-party records due to weak authentication and access controls.
cookiegate.org
October 25, 2026 at 7:00 PM
cookiegate.org
Term of the day: Advertising ID

An advertising ID is a unique identifier assigned to a mobile device that lets advertisers recognize the device across apps in order to deliver and measure targeted ads, without directly...

Full definition: cookiegate.org/glossary/advertising-id

#privacy #GDPR
Advertising ID. An advertising ID is a unique identifier assigned to a mobile device that lets advertisers recognize the device across apps in order to deliver and measure targeted ads, without directly using a name or email. On major mobile platforms, users can typically reset or delete this identifier, and platform-level controls may limit its availability. Although it is often described as anonymized, an advertising ID can still be treated as personal data under laws such as the GDPR because it can single out a device and its user.
October 25, 2026 at 3:01 PM
cookiegate.org
CCPA Compliance on a Budget: A DPO's Playbook

#privacy #GDPR
CCPA Compliance on a Budget: A DPO's Playbook
This playbook helps DPOs manage California's changing privacy regulations by integrating CCPA compliance efficiently without overspending or duplicating GDPR efforts.
cookiegate.org
October 24, 2026 at 7:00 PM
cookiegate.org
Term of the day: Advertising Cookies

Advertising cookies are small files placed on your device when you visit a website that record information about your browsing behaviour and interests. Websites and advertisers use...

Full definition: cookiegate.org/glossary/advertising-cookies

#privacy #GDPR
Advertising Cookies. Advertising cookies are small files placed on your device when you visit a website that record information about your browsing behaviour and interests. Websites and advertisers use them to build a picture of what you look at online so they can show you ads tailored to your apparent preferences. Because they involve tracking rather than being essential to a site working, they are generally treated differently under privacy rules than strictly necessary cookies.
October 24, 2026 at 3:01 PM
cookiegate.org
EXTIA Fined EUR 300,000: Your DSAR Triage Decision Tree

#privacy #GDPR
EXTIA Fined EUR 300,000: Your DSAR Triage Decision Tree
EXTIA’s EUR 300,000 fine highlights the need for effective DSAR triage. Choosing the right process based on volume and complexity ensures GDPR compliance.
cookiegate.org
October 23, 2026 at 7:01 PM