In 1945, Soviet schoolboys gave the US ambassador in Moscow a hand-carved wooden replica of the Great Seal… with a passive listening device hidden inside. It hung on his office wall for seven years. Apple’s new Watch feature does something strikingly similar: it listens to your real-world conversations, transcribes them in the cloud, and hands you back a summary. For any company whose employees wear one, that’s not a convenience feature. It’s an unaudited, unmanaged compliance risk sitting on their wrist.
What Is a Coverage Scan and What Does It Find?
Under the California Consumer Privacy Act, or CCPA, sending data to Meta or Google through a tracking pixel counts as a “sale” (even without an exchange of money) which means it requires your website to have a valid opt-out mechanism. Sephora ($1.2M) and Tractor Supply ($1.35M) were both fined over their lack of compliance with this mechanism. Compliant retailers need three things in place: a consent banner, recognition of Global Privacy Control (GPC) signals, and most importantly validation that their tags actually honor both the banner and the GPC signals. DataTrue tests the third piece, which most programs skip.
CCPA Explained: What Enterprise Retailers Need to Know About Pixels
Sephora and Tractor Supply paid a combined $2.55M in CCPA fines over their tracking pixels. A consent banner alone didn’t save them, and it won’t save you. Here’s why compliance takes three layers—and why the one almost everyone skips is the one that actually matters.
GPC Compliance: What It Means to Actually Honor Opt-Out
Global Privacy Control is now a legal mandate in California, Connecticut, and Oregon, and a consent banner isn’t enough to satisfy it. Tractor Supply learned that the hard way: a $1.35M fine despite having a banner in place, because its tags kept firing anyway. Here’s what honoring the GPC signal actually requires, and how to test for it before your next release.
How the Meta Pixel Transmits PII: A Technical Breakdown
The Meta Pixel sends more than page views by default, including hashed emails that still count as PII. DataTrue shows you exactly what your pixels transmit, and to whom.
What Fires Before Consent? The Technical Gap in Your CMP
When a user lands on a page, tags can begin firing in milliseconds before a consent banner even renders, which means they can fire before any choice has been recorded. This gap is part of the basis behind Google Analytics bans in Austria, France, Italy, and Denmark. A...
What Is Consent Simulation? How to Validate Your CMP.
A cookie banner records what a user chose. It doesn’t verify what your tags actually do. Consent simulation tests pre-consent firing, post-opt-out leaks, and GPC violations before your code reaches production, the way PlayOn’s $1.1M settlement proved a banner alone can’t.
The $1.1M PlayOn Fine: What Went Wrong?
PlayOn Sports had a working consent banner. Its tags kept firing anyway. Here’s how a $1.1M CPPA fine happened, and how a ten-minute test could have stopped it.
How to Test Analytics Tags Before Deployment: A Complete Guide
Testing analytics tags before deployment means validating that your tags are firing correctly, transmitting accurate data, and respecting consent settings in a staging environment before code reaches live users. Methods can range from manual GTM Preview Mode checks to automated pre-publish regression testing. DataTrue runs these tests against tag management (e.g. Adobe Launch and GTM) staging containers via CI/CD, allowing it to catch rogue pixels, consent regressions, and data layer errors before they even reach a production environment.
Your tracking pixels may be a Privacy Act breach. The OAIC just proved it.
On 24 June 2026, Australia's Privacy Commissioner Carly Kind published two landmark determinations against Medmate Australia and Monash IVF. Both companies used third-party tracking pixels on their websites without user consent. Both captured sensitive health...
Digital Governance using DataTrue Data Governance Tools
How to ensure data governance and digital governance by consent verification Deploying a Consent Management Platform CMP captures user consent. Emails may also contain leaky third party tags. Without a data governance layer to enforce it, your tag implementation may...
DataTrue vs Leading Privacy Compliance Platforms
While at the 2025 IAPP conference recently in San Diego there were several privacy compliance vendors, possibly the two most well known were OneTrust and BigID, and since these two vendors are appearing also at the 2025 ANZ IAPP conference in Sydney its helpful to set...