33 docs tagged with "compliance"

How the Digital Omnibus simplifies AI compliance and clarifies GDPR-AI intersection

When analytics cookies are exempt from consent under AEPD and CNIL criteria: user notification, 13-month cookies, 24-month retention, own purposes only.

Track account activity and configuration changes for security and accountability.

Query the audit trail of mutating actions across your organization, filterable by action type, resource, author, and date range

CNIL self-assessment for Sealmetrics analytics - how it maps to the French consent exemption requirements. Self-assessed, not certified.

How Sealmetrics is designed to meet GDPR, ePrivacy, and CNIL requirements (self-assessed, not certified): bot filtering, legal analysis, and a legal FAQ for consentless, cookieless analytics.

How the proposed EU Digital Omnibus would change cookie consent rules by moving them under the GDPR

Changes to data intermediation and data altruism rules under the Digital Omnibus

How the Digital Omnibus merges FFDR, DGA, and Open Data Directive into the Data Act

How data subject access requests work with Sealmetrics — why visitor requests cannot be linked to any record, and how account-holder rights are handled.

When a session ID triggers the ePrivacy consent requirement and when it does not, and how Sealmetrics builds its session identifier: an in-browser device-characteristics hash, never stored on the device, re-keyed daily on the server.

Official position of European data protection authorities on the Digital Omnibus proposal - concerns, support, and recommendations

Complete guide to the EU Digital Omnibus Regulation (COM(2025) 837) simplifying GDPR, ePrivacy, and data legislation

Detailed analysis of GDPR changes: personal data definition, pseudonymization, AI training, breach notifications

How cookieless analytics comply with GDPR requirements and provide better data without consent banners

How the ePrivacy consent rule and the GDPR apply to a session identifier that rotates daily, the legitimate-interest basis, and when a session ID does or does not require consent.

Self-assessment of Sealmetrics against §25 TDDDG (formerly TTDSG): nothing stored on the device, no cookies, and why whether a consent banner is needed in Germany remains an open question.

Why Sealmetrics does not respond to GPC or DNT browser signals — you cannot opt out of a measurement that never tracked you in the first place.

How Sealmetrics filters bot traffic with layered, privacy-safe defenses — and why its ephemeral, in-memory use of IPs fits a platform designed to comply with the GDPR and ePrivacy.

How Sealmetrics detects visitor country from the browser timezone instead of IP addresses — GDPR-friendly geo data with no IP address stored or looked up.

The concrete protections behind Sealmetrics — no cookies, no persistent identifiers, no stored IP addresses, EU-only storage and short retention.

How the Digital Omnibus affects web analytics, consent requirements, and consentless tracking solutions

Key dates and milestones for the EU Digital Omnibus: proposal publication, committee assignments, feedback periods, and the expected GDPR change timeline.

Self-assessment of how Sealmetrics' privacy-first, isolated-hit architecture is designed to meet GDPR, ePrivacy, CCPA and PECR requirements. Not a certification.

Self-assessment of Sealmetrics against the Italian Garante's cookie guidelines and analytics decisions — consent-free audience measurement in Italy.

Nothing stored on the device, no data that identifies anyone, a session identifier that rotates daily. Self-assessments against CNIL, UK PECR, TDDDG, Garante and FADP criteria, plus the DPA.

Answers to the legal questions asked in vendor reviews of Sealmetrics: DPA, DPIA, subprocessors, Dublin hosting, IP handling, cookies, 24-month retention.

New unified cybersecurity and data breach reporting system operated by ENISA

How the Digital Omnibus extends small business protections to companies with up to 749 employees

Sealmetrics subprocessors are listed in Annex 3 of the DPA at sealmetrics.com/dpa — the authoritative list; change notifications by email on request.

Self-assessment of Sealmetrics against the revised Swiss FADP (nFADP) and Art. 45c TCA: no data that identifies anyone, nothing on the device, a session identifier that rotates daily, EU-only processing in Dublin.

Self-assessment of Sealmetrics against the UK PECR analytics exemption under DUAA 2025: aggregate statistics only, user information, opt-out, no advertising.

A lookup table of the external domains analytics tools contact — Adobe, GA4, Mixpanel, PostHog, Piwik PRO and others. Which tool owns each one, and where it resolves.