Posts

Showing posts with the label #Compliance

How to Set Up Google Consent Mode v2 With GA4 in 2026 (No Code, GDPR-Safe)

  Every marketing team wants clean GA4 numbers and a compliant cookie setup. The trouble is, most teams still run a configuration that ignores a big update from 15 June 2026. Since that date, Google Signals no longer controls your Google Ads data inside GA4. Consent Mode does. Old configurations quietly lose users, shrink audiences and drop conversions. What Google Signals is Google Signals connects sessions from the same person across their phone, laptop and tablet. It only turns on when the visitor is signed in and has Ads Personalisation on in their Google account. It does not manage cookies. It only enriches data already collected with consent. What Consent Mode v2 is Consent Mode v2 is the switchboard. It reads a visitor's cookie choice before any Google tag fires. Four flags are involved: ad_storage, analytics_storage, ad_user_data and ad_personalisation. Basic mode blocks tags until consent is given. Advanced mode fires cookie-less pings that GA4 can later model into...

What Counts as Personal Data Under GDPR, and the Six Things People Get Wrong

Image
  GDPR uses one sentence to define personal data. Article 4(1) calls it "any information relating to an identified or identifiable natural person". Everything else follows from that sentence, so it helps to read it slowly. Two words do the work. Identified means you already know who it is. Identifiable means you could work it out. Things that count The European Commission gives a plain list: a name and surname, a home address, an email address, an IP address, an identification card number, a cookie ID, and the advertising identifier of your phone. Video recording from CCTV is on the list too. Things that do not count A company registration number is not personal data. A generic mailbox such as info@company.com is not personal data. Truly anonymised information is outside GDPR, and only when the anonymisation cannot be reversed. The six mix ups Assuming work emails are exempt. A named address like sarah.jones@company.com identifies a person, so it counts. Treating coded record...

Geo-Targeted Cookie Banners: Why One Notice No Longer Fits Every Visitor

Does your website show the same cookie banner to every visitor? If it does, you are likely doing two things at once: over-asking people in relaxed regions and falling short in strict ones. Geo-targeted cookie banners fix that by matching the notice to the visitor's location. What geo-targeting actually does When someone lands on your site, the consent system checks their IP against a geolocation database and works out their country or region. It then shows the banner built for that jurisdiction. A visitor in Germany sees a GDPR opt-in. A visitor in California sees a CCPA opt-out with a Do Not Sell or Share option. A visitor in a region with light rules may see a short notice or none at all. Why one banner cannot cover everyone The laws simply do not agree. GDPR requires opt-in before non-essential cookies load. CCPA follows an opt-out model. Brazil's LGPD asks for consent per purpose. A single banner either restricts users who do not need a full opt-in or under-complies fo...

How GDPR Staff Training Saves Businesses from Legal Trouble

Image
  Legal trouble doesn't announce itself. It starts with a simple mistake. An employee forwards an email containing customer data to the wrong person. Another staff member ignores a data request because they don't recognize it. These small errors snowball into massive problems. In 2024, European regulators issued EUR 1.2 billion in GDPR fines. Many of these penalties could have been prevented with proper staff training. The Hidden Costs of Untrained Staff Most business owners focus on obvious expenses. Salaries. Office rent. Marketing budgets. But there's a hidden cost that can dwarf all of these: regulatory violations caused by untrained employees. GDPR establishes a two-tier administrative fine structure with maximum penalties reaching up to 4% of annual global turnover. Think about your annual revenue. Now calculate 4% of that number. That's your maximum exposure for serious violations. But fines are just the beginning: Legal fees for defending against regulat...