The EDPB's 2026 Enforcement Target Is Your Privacy Notice
The EDPB's 2026 coordinated action audits transparency under GDPR Articles 12–14. The shortest path through it is collecting so little that the notice writes itself.
Read more →The Digital Omnibus Wants to Exempt First-Party Analytics From Consent
The EU's November 2025 Digital Omnibus proposes a consent exemption for first-party, internal-use audience measurement. It describes the model cookie-free analytics already runs.
Read more →When Is a Hash Personal Data? The CJEU's SRB Ruling and Analytics Identity
The CJEU's EDPS v SRB judgment made identifiability a relative, contextual test. Here is what that means for hash-based analytics — and why a daily-rotating salted hash survives both the court's reading and the EDPB's stricter one.
Read more →Consent Mode v2 and the June 2026 Google Signals Sunset
On June 15, 2026, ad_storage becomes the sole control over advertising data in Google's stack. Here is what the Google Signals sunset changes for developers — and why the whole machinery is something cookie-free analytics never had to build.
Read more →Storage Limitation Is the 2026 Enforcement Frontier for Analytics
Regulators stopped asking whether you collected data lawfully and started asking when you deleted it. After the CNIL's €42M Free ruling and the EDPB's erasure sweep, analytics retention is the audit target.
Read more →Global Privacy Control Is Now a Binding Opt-Out Signal in Ten States
GPC is no longer advisory. After the Disney settlement and a three-state enforcement sweep, the Sec-GPC header is legally binding across ten US states — and cookie-free analytics has nothing to honor.
Read more →The Cookie Law Is No Longer About Cookies: What Article 5(3) Now Covers
EDPB Guidelines 2/2023 extended ePrivacy consent rules to pixels, URL tracking, and IP-only identification. Recent CNIL and Garante decisions confirm the technology-neutral reading. Here is what changes for developers.
Read more →Inaccessible Consent Banners Now Create Two Legal Liabilities, Not One
The European Accessibility Act made WCAG 2.2 enforceable in June 2025. A banner a screen reader cannot navigate invalidates GDPR consent. Cookie-free analytics sidesteps both problems.
Read more →