Session replay: what it records, and who’s sued over it?
Session replay is a digital analytics technology that records what a visitor does on a website (clicks, scrolls, form entries, including text never submitted) and rebuilds it as […]
Explore the blog
Latest analysis
Read the evidence
What Is GDPR? EU’s Data Protection Law Explained
The General Data Protection Regulation (GDPR) is the EU’s comprehensive data privacy law, effective since 25 May 2018. It applies to any organization worldwide that offers goods or […]
Web Tracking: Where Your Data Actually Goes (2026)
Web tracking is the collection of data about a visitor’s behavior on a website, and across websites, by the site itself and by third-party code running on it. […]
What is a privacy impact assessment, and how do you run one?
A privacy impact assessment (PIA) is a formal analysis of how personal information is collected, used, shared, and protected, done before processing starts, not after something goes wrong. […]
What Is Global Privacy Control (GPC)?
Global Privacy Control (GPC) is a browser-level signal that automatically tells every website you visit that you opt out of the sale or sharing of your personal data […]
What is a DSAR? 2026 Guide
A Data Subject Access Request (DSAR) is a legally enforceable request from an individual to find out whether an organization holds personal data, to obtain a copy, and […]
Data Retention Policy: What to Keep & How Long (2026 Guide)
A data retention policy is the documented set of rules that decides what data your organization keeps, where it lives, how long it stays, and how it is […]
Data Privacy Risk: Definition, Examples & Assessment Guide (2026)
Data privacy risk is the potential for legal, financial, or reputational harm arising from how an organization collects, uses, shares, retains, or discloses personal data. A company can […]
What Is a Privacy Incident? Complete Guide
A privacy incident is any suspected or confirmed event that compromises the confidentiality, integrity, or availability of personal information, including unauthorized access, use, disclosure, loss, or destruction of […]
What is a Pen Register? Definition, Law, and Website Tracking Risk (2026)
A pen register is a device or process that records dialing, routing, addressing, or signaling information- the metadata of outgoing communications, such as dialed numbers or contacted addresses. […]