Compliance

These privacy compliance guides help website owners meet GDPR, CCPA and India’s DPDP Act. They are written for people who must actually ship the changes.

The work splits into three tracks. First, cookie compliance covers banners and consent. Second, data privacy and user rights handles requests. Third, sensitive data protection deals with the riskiest data.

26 articles

21/04/2020 6 min read

Cookie Consent Records: Why They Matter and How OneTrust Helps

Why cookie consent records matter under GDPR Article 7 and how OneTrust Capture Records of Consent, receipts, and…
05/11/2019 6 min read

OneTrust vs Manual Cookie Compliance: Which Is Right for Your Business?

Choose OneTrust or a manual cookie banner: scans, geo rules, Consent Mode, receipts, publisher TCF needs, cost tradeoffs,…
15/10/2019 6 min read

Securing Sensitive Data: Consent, Encryption, and Access Controls

Secure high-harm personal data on websites with consent and choice records, encryption in transit and at rest, and…
23/07/2019 7 min read

How to Perform a Cookie Audit Before Implementing OneTrust

Run a cookie audit before OneTrust: tag exports, DevTools journeys, CMP scans, Unknown cookies, and an inventory sheet…
28/05/2019 6 min read

Data Minimization and Retention for Sensitive Data: A Website Checklist

Website checklist for minimising and retaining high-harm personal data under GDPR Article 5, DPDP section 8 and Rules…
14/03/2019 7 min read

Cookie Banner Best Practices That Improve Consent Rates

Cookie banner practices that raise informed consent rates: equal reject, clear copy, Preference Center design, geo rules, and…
19/02/2019 9 min read

How to Handle DSARs with OneTrust: Access, Correction, and Erasure

Configure OneTrust Privacy Rights Automation for access, correction, and erasure requests, with identity checks, TDD discovery, portal responses,…
11/09/2018 10 min read

How to Set Up OneTrust Cookie Consent on Your Website

Step-by-step OneTrust Cookie Consent setup: scan, categorise, templates, geolocation rules, CDN scripts, blocking, and Google Consent Mode v2.
07/08/2018 7 min read

How to Write a Privacy Policy That Covers User Rights

Structure a privacy notice for DPDP Rule 3 and GDPR Articles 12 to 14 that explains access, correction,…
10/07/2018 7 min read

GDPR Special Category Data: What Websites Must Protect

GDPR Article 9 special category data for website teams: what counts, the Article 6 plus Article 9 rule,…
18/06/2018 9 min read

GDPR Cookie Consent Requirements: What Website Owners Must Know

GDPR and ePrivacy cookie consent for website owners: prior consent, equal reject, withdrawal, EDPB guidance, and a practical…
05/06/2018 12 min read

Cookie Compliance: A Practical Guide

Practical cookie compliance guide for website owners and marketers: GDPR, CCPA/CPRA, India's DPDP Act, audits, banners, consent records,…