GDPR & Privacy
Every website with EU visitors needs a privacy policy, and most cookie banners still fall short of what counts as valid consent. These answers cover what the law actually requires and what regulators have fined people for.
Tools
Start here
Every question in this topic
21 answersGDPR Privacy Policy
- Do You Need a Privacy Policy on Your Website? (EU Law Explained)
- Does a privacy policy need to be written by a lawyer?
- Does GDPR apply to my website if I am based outside the EU?
- Is a privacy policy the same as a cookie policy?
- Can I use a free privacy policy template from the internet?
- What happens if I receive a data subject access request and I have no privacy policy?
- GDPR Compliance Checklist for Websites (2026)
- GDPR Data Processing Agreement (DPA): When You Need One (2026)
- GDPR Data Subject Rights: What Businesses Must Do (2026)
- GDPR Fines: Real Examples and How to Avoid Them (2026)
- GDPR and Google Analytics: Are You Actually Compliant?
- GDPR Legitimate Interest: When to Use It (and When Not To)
- GDPR Privacy Policy for E-Commerce Websites 2026: Full Checklist
- GDPR Privacy Policy Requirements for Websites (2026)
- What Is GDPR? A Plain Guide for Small Business Owners
Cookie Banner Generator
- Cookie Categories Explained: Analytics, Marketing, Essential, Functional (2026)
- What is the difference between functional cookies and strictly necessary cookies?
- Does Google Analytics count as an analytics cookie or a marketing cookie?
- Are Stripe payment cookies strictly necessary?
- What happens if I miscategorise a cookie — for example, listing a marketing cookie as strictly necessary?
- Do I need consent for cookies set by embedded third-party content like YouTube videos?
- How Long Does Cookie Consent Last? GDPR Renewal Requirements 2026
- Does GDPR specify a maximum duration for cookie consent?
- What counts as a "material change" that triggers mandatory re-consent?
- What happens to data collected under expired or invalid consent?
- How do I implement re-consent technically in my CMP?
- How long should I keep consent records for audit purposes?
- Cookie Consent for SaaS and B2B Websites: What's Different? (2026)
- Does GDPR apply to B2B websites if we only target business customers?
- Can I use legitimate interest instead of consent for analytics cookies on a SaaS site?
- What cookies are strictly necessary in a SaaS product after a user logs in?
- How do intent data tools like Clearbit and ZoomInfo relate to cookie consent?
- Best GDPR Cookie Consent Plugins for WordPress 2026 — Compared
- What is IAB TCF and do I need it for my WordPress site?
- Can I use Google Tag Manager with a WordPress consent plugin?
- Does having a cookie consent plugin make my WordPress site GDPR compliant?
- How do I stop WooCommerce or my theme from setting cookies before consent?
- Is a free WordPress cookie consent plugin legally sufficient?
- Cookie Policy Template: What It Must Include Under GDPR (2026)
- CookieFirst for WordPress: Setup, Pricing, and Whether It's Right for You (2026)
- GDPR Cookie Consent Requirements for Websites 2026
- GDPR Reject Button Requirements: What the Law Actually Says (2026)
- Does GDPR explicitly require a "Reject All" button?
- Can the reject button be on a second layer — for example, inside "Manage Preferences"?
- What does "equal prominence" mean in practice for the reject button?
- Are there DPA-approved examples of compliant banner designs?
- What is the actual fine risk for not having a compliant reject button?
- IAB TCF 2.2 Explained: Do You Need a TCF Cookie Banner? (2026)
- Matomo Cookie Consent: Do You Need a Banner, or Does Cookieless Mode Skip It? (2026)
- Facebook Pixel, HubSpot & Intercom: Managing Third-Party Cookie Consent (2026)