Security Headers as Privacy Tools: CSP, HSTS, and Permissions-Policy
HTTP security headers serve as effective privacy controls. CSP prevents unauthorized tracking, HSTS protects against interception.
Blog
Expert analysis on GDPR enforcement, dark patterns, tracking forensics, and compliance.
Cookie Consent: When Art. 5(3) ePrivacy Actually Requires User Permission
Art. 5(3) ePrivacy doesn't require consent for all cookies. The determining factors are specific purpose limitation and technical necessity.
Consent Mode v2 Deception: How Google's Tool Weaponizes Against Users
Google Consent Mode v2 enables tracking without explicit consent through technical deception. A forensic analysis of the legal pitfalls for controllers.
CJEU Meta Ruling: Why Consent Fails for Bundled Services
CJEU ruling C-252/21 against Meta shows: consent cannot be forced when services are bundled. New requirements for platforms emerge.