Data Privacy & GDPR
Compliance Help Center
Guides on GDPR compliance, cookie consent, data governance, and privacy operations. Find what you need in seconds.
Explore by Product
Documentation for each area of the Secure Privacy data protection platform
Consent Management
Deploy compliant cookie banners, manage user preferences, and automate consent collection across all your digital properties.
Privacy & AI Governance
Centralize your privacy program with process registers, data mapping, and compliance workflows that scale with your organization.
DPO as a Service
Access dedicated Data Protection Officer expertise on-demand with managed compliance monitoring, breach response, and regulatory guidance.
Browse by Privacy Topic
Quick access to the most popular data privacy and compliance topics
Getting Started
15 articlesIntegrations
37 articlesCompliance & Regulations
12 articlesPolicies & User Consent
17 articlesCustomization
15 articlesGoogle Consent Mode
5 articlesScanning & Performance
2 articlesDSARs
4 articlesGovernance Solution
20 articlesSubscriptions & Partnerships
6 articlesFAQs
21 articlesSecure Privacy Legacy
30 articlesDPO Fundamentals
7 articlesDPO Compliance
12 articlesDPO Operations
9 articlesRecently Published
The latest data privacy guides and compliance updates
CIPA vs. CCPA: CMP and Consent Banner Changes in Secure Privacy
CIPA vs. CCPA: Consent Banner and CMP Changes Website Teams Should Review in Secure PrivacyMany companies already use a California CCPA template in their CMP and assume the setup is complete. In pract
GDPR Employee Data Compliance – HR Data Lifecycle, Lawful Bases, Workplace Monitoring, and Staff Privacy Rights
Employee personal data is subject to the full scope of GDPR obligations across every phase of the employment lifecycle. This guide covers lawful bases for HR data processing, DPIA requirements for workplace monitoring, employee privacy rights, and how your Secure Privacy DPO manages compliance at each stage.
Healthcare GDPR Compliance – Special Category Health Data, Article 9 Requirements, and DPO Guidance
Healthcare organizations process special category health data under GDPR Article 9 — requiring both a lawful basis and an Article 9(2) condition for every processing activity. This guide covers key healthcare data categories, DPO focus areas including patient rights and research compliance, telemedicine obligations, and how your Secure Privacy DPO supports clinical data governance.
E-Commerce GDPR Compliance – Data Protection for Online Retail, Marketing Consent, and Cookie Management
E-commerce organizations process high volumes of personal data across transactions, marketing, and behavioral tracking — subject to GDPR, the ePrivacy Directive, and PCI DSS simultaneously. This guide covers the key data protection obligations for online retail, common compliance failures, and how your Secure Privacy DPO manages cookie consent, marketing compliance, vendor management, and cross-border data protection requirements.
GDPR Lawful Bases for Processing – Article 6 Guide, Legitimate Interest Assessments, and Special Category Data
GDPR Article 6 requires every personal data processing activity to be grounded in one of six lawful bases. This guide covers when each basis applies, how your Secure Privacy DPO advises on selection and documentation, the three-part Legitimate Interest Assessment test, and the additional Article 9(2) conditions required for special category data.
GDPR Data Retention Policy – Storage Limitation Principle, Retention Schedules, and DPO Oversight
GDPR Article 5(1)(e) requires personal data to be retained only as long as necessary for its processing purpose. This guide covers how your Secure Privacy DPO builds a comprehensive retention schedule, common retention periods by data category, automated deletion controls, and how retention compliance is monitored through regular audits.
Still have questions?
Our data privacy experts are here to help with GDPR compliance, consent management, and any other privacy questions. Drop us a line.
Contact SupportFrequently Asked Questions
Quick answers to common questions
Essential cookies (also called strictly necessary cookies) are required for your website to function properly. They include session management, authentication, shopping cart, and security cookies (like CSRF tokens). Under GDPR and the ePrivacy Directive, these cookies do not require user consent because the website cannot operate without them. Secure Privacy automatically classifies these and enables them by default.
Yes. Each subdomain (e.g., shop.example.com, blog.example.com) is treated as a separate property because it can set its own cookies and trackers independently. A license for example.com does not cover its subdomains. Subpages (e.g., example.com/blog) are covered under the main domain license. Contact our sales team for volume discounts on multiple subdomain licenses.
Secure Privacy stores all service data securely within the European Union using trusted cloud infrastructure providers including Microsoft Azure and Amazon AWS. Our data centers comply with ISO 27001, SOC 2 Type II, and GDPR requirements. Consent records, scan results, and configuration data are encrypted at rest and in transit.
If your website uses a firewall, CDN (like Cloudflare), or WAF, you may need to allowlist our scanner IP addresses to ensure reliable compliance scans. Our IP list is updated periodically for security reasons. Contact [email protected] to request the current list of scanner IPs, and add them to your allowlist or firewall rules.
No. Under GDPR, only non-essential cookies must be blocked before consent. Essential cookies that are strictly necessary for the website to function (session cookies, authentication, security) should always be allowed. You should block analytics, marketing, preference, and social media cookies until the user explicitly grants consent for each category.
This message appears in the developer console when a visitor accesses your site from a geographic region that is not covered by any of your configured legal templates. For example, if you only have a GDPR template for EU visitors, someone visiting from a non-covered region may see this message. The cookie banner will not display for that visitor. To resolve this, add legal templates for all regions where your website has visitors, or configure a default/global template.
Secure Privacy is designed for minimal performance impact. The script loads asynchronously so it does not block page rendering or affect Core Web Vitals. The compressed script is under 40KB and is served via a global CDN. The banner uses fixed positioning to avoid layout shifts. For SEO, we automatically add noindex tags to generated consent pages and our banner does not interfere with search engine crawlers.
Secure Privacy supports the latest 2 major versions of all popular browsers: Google Chrome, Mozilla Firefox, Safari, Microsoft Edge, and Opera. We also support mobile browsers on iOS (Safari) and Android (Chrome). For the best experience and full functionality, we recommend keeping your browser updated to the latest version.
Under CPRA regulations, businesses must honor Global Privacy Control browser signals as valid opt-out requests. Secure Privacy automatically detects GPC signals when you enable CCPA/CPRA compliance mode. When a GPC signal is detected, the system treats it as a "Do Not Sell or Share" request without requiring any additional action from the visitor. Enable this in Settings > Regulations > CCPA/CPRA > Detect and honor GPC signals.
Yes. Secure Privacy offers a Mobile SDK compatible with Native iOS and Android, React Native, and Flutter. The SDK provides cross-platform consent management with GDPR and CCPA compliance, customizable UI components, multilingual support, and the same consent storage and proof capabilities as the web version. Contact our team for SDK documentation and integration guides.