Invoices kept 10 years, job applicant files 6 months: small German firms get a deletion catalog model. Can backups and processors still bring erased data back?

In August 2018 the Irish regulator told Google to reply urgently on location data; the €403m fine came in 2026. Critics ask what 8 years of delay cost rivals.

Pages calling gtag('config') now emit a gtag.config dataLayer event that can fire tags on wildcard .* triggers. Which setups break, and what replaces them?

Census, NHS and local search data feed each UK pharmacy snapshot. No price, sample report or pharmacy client is named - so what does the check really measure?

Fake Cloud Console page on sites.google.com fed logins to accounts.gtoosl.com, a domain registered in August. How did that page end up in Google's own ad slots?

No price was disclosed for the identity firm Zeta says lifts its European presence. What it adds to the Data Cloud, and why backers saw value beyond revenue.

Cloud Technologies takes the TrueData brand and its third-party audience marketplace, while ID5 keeps the graph. What does the split say about neutral identity?

Contextual ad measurement and capping cookies would need no consent under the October 2 text. EU ambassadors meet Sunday; Parliament has yet to take a position.

A reverse proxy is a server in front of websites that takes requests on their behalf and relays the replies. It underpins CDNs, tag gateways and bot blocking.

Malvertising is the use of online ads to deliver malware, scams or forced redirects, abusing ad networks and search ads to reach people on trusted websites.

Session hijacking is the takeover of a logged-in account by stealing or reusing its session token, usually a cookie, so no password or second factor is needed.

A domain registrar is a company accredited to sell and manage domain names on behalf of registries. How EPP, RDAP, fees, transfers and DNS abuse rules work.

Third-party data is information about people collected by a company with no direct relationship to them, then packaged into segments and sold to advertisers.

Realistic fakes of any face, voice or movement would need permission, with protection running 50 years after death. What does bill L 49 mean for AI-made ads?

An audience marketplace is a platform where data providers list pre-built audience segments that advertisers license for ad targeting inside buying platforms.

BYOD targeting means advertisers bring their own customer data, such as hashed emails or CRM lists, into a DSP or other media platform to choose who sees ads.

A suppression audience is a list of people an advertiser excludes from a campaign, such as recent buyers or unsubscribers, to cut waste and honour opt-outs.

Lookalike modeling finds new people resembling an advertiser's existing customers, using a seed list and a similarity model to rank a platform's user base.

Aisle penetration is the share of a store's shoppers who walk past a given aisle or ad placement, the input that turns footfall into in-store ad impressions.

Trilogue: the informal talks where the European Parliament, Council and Commission settle the final text of EU laws, from the GDPR and the DSA to the AI Act.

Coreper: the committee of EU member states' ambassadors that prepares every Council decision, setting national positions on GDPR, ePrivacy, AI Act and ad rules.