DPDPIndia
India’s DPDP Act: what consent managers must get right
The Digital Personal Data Protection Act, 2023 recasts consent as a recorded, purpose-bound choice. Here is how platforms should operationalize it.
Sep 2, 2026 · 8 min read
Blogs
Privacy laws, consent, and the systems that make them real
Stay relevant with news of DPDP Act.
GDPREuropean Union
GDPR consent vs legitimate interest: pick the lawful basis you can defend
Article 6 is not a menu of convenience. Consent and legitimate interest have different tests, different UX, and different failure modes.
Aug 28, 2026 · 7 min read
Consent managerGlobal
Why every multi-site business needs a consent manager
Privacy policies describe intent. A consent manager enforces it — across banners, SDKs, vendors, and audits.
Aug 22, 2026 · 6 min read
CCPA / CPRAUnited States
CCPA and CPRA: designing opt-out that actually works
California’s privacy law is opt-out first for sale and sharing. Your banner, GPC handling, and “Do Not Sell” link have to agree.
Aug 18, 2026 · 7 min read
LGPDBrazil
LGPD in Brazil: consent, ANPD expectations, and multilingual notices
Brazil’s LGPD looks familiar to GDPR teams, but ANPD guidance, Portuguese notices, and children’s rules still catch global brands off guard.
Aug 12, 2026 · 6 min read
PIPEDACanada
PIPEDA and meaningful consent in Canada
Canada’s federal private-sector law asks whether a reasonable person would understand what they agreed to — not whether a box was ticked.
Aug 6, 2026 · 6 min read
PDPASingapore
Singapore PDPA: consent, notification, and purpose limitation
Singapore’s PDPA allows exceptions, but notification and purpose limitation still require a disciplined consent and preference layer.
Jul 30, 2026 · 6 min read
PDPAThailand
Thailand’s PDPA and cross-border data transfers
Thailand’s PDPA is now an enforcement reality. Transfers, cookies, and consent records need the same rigor as EU programs.
Jul 24, 2026 · 6 min read
PIPASouth Korea
South Korea’s PIPA: high-friction consent done well
Korea’s PIPA is known for detailed, purpose-specific consent. Generic EU banners usually fail on day one.
Jul 18, 2026 · 7 min read
APPIJapan
Japan’s APPI and the cookie consent conversation
APPI amendments tightened sharing rules. Cookie and advertising programs still need a clear, Japan-specific story.
Jul 12, 2026 · 6 min read
Privacy ActAustralia
Australia’s Privacy Act reforms and the rise of enforceable consent
Reforms around children’s privacy, consent, and OAIC enforcement are pushing Australian programs beyond a static policy page.
Jul 6, 2026 · 6 min read
UK GDPRUnited Kingdom
UK GDPR after Brexit: same vocabulary, different regulator
UK GDPR still looks like EU GDPR, but ICO guidance, PECR cookies, and the Data (Use and Access) trajectory deserve their own configuration.
Jun 28, 2026 · 6 min read
POPIASouth Africa
POPIA in South Africa: consent, operators, and accountable processing
POPIA puts a premium on responsible parties, operator agreements, and conditions for processing. Consent is only one of several paths.
Jun 20, 2026 · 6 min read
PDPLUnited Arab Emirates
UAE PDPL: federal privacy rules meet free-zone regimes
The UAE’s PDPL sits alongside DIFC and ADGM regimes. Multi-entity groups need jurisdiction-aware consent, not one Gulf-wide banner.
Jun 12, 2026 · 6 min read
PDPLSaudi Arabia
Saudi PDPL: national data, consent, and localization pressure
Saudi Arabia’s PDPL and SDAIA regulations raise the bar on consent quality, sensitive data, and when data should stay in-kingdom.
Jun 4, 2026 · 6 min read
PIPLChina
China PIPL: separate consent is not a slogan
PIPL expects separate consent for sensitive personal information, public disclosure, and many cross-border transfers. Bundling is a liability.
May 28, 2026 · 7 min read
CookiesGlobal
Cookie consent best practices that still hold up in 2026
Reject as easily as accept, no pre-ticked boxes, real blocking before consent, and receipts you can produce in an investigation.
May 20, 2026 · 7 min read
Consent managerGlobal
Consent evidence: what auditors actually ask for
When a regulator or customer asks “prove it,” screenshots of a banner are not enough. Here is the evidence pack a CMP should produce.
May 12, 2026 · 8 min read
Consent managerGlobal
Withdrawal of consent should be as easy as saying yes
DPDP, GDPR, and LGPD all expect withdrawal without detriment. That is a preference-center problem, not a help-desk ticket.
May 4, 2026 · 6 min read
Consent managerGlobal
Preference centers: the missing half of the consent banner
Banners capture a moment. Preference centers manage a relationship — channels, purposes, and vendors over the life of an account.
Apr 26, 2026 · 6 min read
IAB / TCFEU & United States
IAB TCF and the Global Privacy Platform, explained for product teams
TCF strings are how many European ad ecosystems hear consent. GPP extends that idea to US state signals. Your CMP should speak both.
Apr 18, 2026 · 8 min read
Children’s privacyUS, EU, India
Children’s privacy: COPPA, DPDP, and GDPR age gates
Minors’ data is not a smaller GDPR. It is a different regime — parental authority, restricted processing, and age assurance.
Apr 10, 2026 · 7 min read
TransfersGlobal
Cross-border transfers: consent is not your only (or best) tool
SCCs, adequacy, and localization sit beside consent. Mixing them up is how global products fail DPIAs.
Apr 2, 2026 · 7 min read
VendorsGlobal
Vendor management is privacy management
Most “consent failures” are actually vendor-graph failures: a pixel nobody owned, on a purpose nobody mapped.
Mar 24, 2026 · 6 min read
MobileGlobal
Mobile app consent: ATT, consent SDKs, and store policies
Web banners do not cover iOS App Tracking Transparency or Play policy. Apps need the same purpose model with a different runtime.
Mar 16, 2026 · 6 min read
Consent managerGlobal
Orchestrating consent across GDPR, DPDP, CPRA, and LGPD
One product, many laws. The winning pattern is a shared purpose catalog plus jurisdiction rules — not 12 unrelated banners.
Mar 8, 2026 · 8 min read
Data rightsGlobal
Data subject rights work better when consent data is structured
Access, deletion, and portability requests stall when consent logs live in a tag manager and CRM lives somewhere else.
Feb 28, 2026 · 6 min read
Age assuranceGlobal
Age assurance and parental consent without wrecking UX
Regulators want age-appropriate design. Users want to finish signup. The middle path is risk-based assurance plus a guardian flow.
Feb 18, 2026 · 6 min read
AI & privacyGlobal
AI agents, permissioning, and the next consent frontier
When software acts on a user’s behalf, yesterday’s cookie toggle is not enough. Agent permissioning needs purpose, scope, and revocation.
Feb 8, 2026 · 7 min read
Global surveyWorldwide
Privacy laws around the world in 2026: a field guide for CMP teams
From DPDP and GDPR to CPRA, LGPD, PIPL, and PDPL regimes, the common thread is choice you can enforce. Here is the map.
Jan 28, 2026 · 9 min read