Plain guides to the rules your website is read against, from PeekWell.https://peekwell.org/https://peekwell.org/blog/digital-omnibus/https://peekwell.org/blog/digital-omnibus/The digital omnibus has a Council text since 21 October 2026. What it changes for cookie banners, one-click refusal and analytics, and what comes next.Mon, 26 Oct 2026 00:00:00 GMTdigital omnibuseu digital omnibuseprivacy directivegdpr changes 2026gdpr changeseu cookie laweprivacy regulationdigital omnibus timelineePrivacy DirectiveGDPRhttps://peekwell.org/blog/gdpr-fines/https://peekwell.org/blog/gdpr-fines/GDPR fines in 2026: why Orange lost its appeal over cookies, what Google was fined for in Ireland, and what the CNIL fines small websites for.Mon, 26 Oct 2026 00:00:00 GMTgdpr finesgdpr maximum finegdpr breach finewhat is the maximum fine for gdpr non complianceuk gdpr finebiggest gdpr finescnilGDPR Article 83ePrivacy directivearticle 82 loi Informatique et Libertéshttps://peekwell.org/blog/youtube-nocookie/https://peekwell.org/blog/youtube-nocookie/YouTube nocookie embeds explained: what privacy-enhanced mode changes, what still loads before and after Play, and how to hold videos until consent.Mon, 26 Oct 2026 00:00:00 GMTyoutube nocookiewhat is youtube nocookieyoutube privacy enhanced modeyoutube nocookie embedis youtube nocookie safeyoutube embed gdprlite youtube embedwww youtube-nocookie com refused to connectgoogle fonts gdprgoogle maps gdprePrivacy DirectivePECRGDPRhttps://peekwell.org/blog/subscription-traps/https://peekwell.org/blog/subscription-traps/The UK's subscription traps rules are due on 1 January 2027. What the draft regulations ask of your sign-up page, reminders and cancel route, in plain words.Sun, 25 Oct 2026 00:00:00 GMTsubscription trapsnew subscription laws ukdmcca subscription contractsautomatic subscription renewal law uksubscription refund law uk14-day cooling off period subscriptionauto renewal lawDMCC ActConsumer Subscription Contracts (Cancellation and Information) Regulations 2026https://peekwell.org/blog/cma-fines/https://peekwell.org/blog/cma-fines/CMA fines under the DMCC Act: why Wayfair, Appliances Direct and Gold's Gym were fined in October 2026, and how to check your own deals and checkout.Sat, 24 Oct 2026 00:00:00 GMTcma finesfake salefake discountsfalse urgencycma consumer protectionpre ticked boxesWayfair CMADMCC ActConsumer Contracts Regulations 2013https://peekwell.org/blog/video-privacy-protection-act/https://peekwell.org/blog/video-privacy-protection-act/The Video Privacy Protection Act is an old video rental law now used against sites with video and a Meta pixel. What courts ruled, and what comes next.Sat, 24 Oct 2026 00:00:00 GMTvideo privacy protection actvppavppa lawsuitvppa settlementvppa meaning18 U.S.C. 2710Salazar v. Paramount GlobalMeta Pixelhttps://peekwell.org/blog/cipa-lawsuit/https://peekwell.org/blog/cipa-lawsuit/A CIPA lawsuit targets pixels, chat widgets and session replay on your site. What courts have ruled, what SB 690 ends, and what is still open.Fri, 23 Oct 2026 00:00:00 GMTcipa lawsuitcalifornia invasion of privacy actcipa claimscipa violationscookie lawsuitcalifornia wiretapping lawcipa statute of limitationscipa 631cipa pen registerSB 690Penal Code 631Penal Code 632Penal Code 638.51https://peekwell.org/blog/sb-690/https://peekwell.org/blog/sb-690/SB 690 ends private pen register suits over website trackers from 1 January 2027. What changes, which CIPA claims remain, and what to check on your site.Fri, 23 Oct 2026 00:00:00 GMTsb 690sb 690 californiasb 690 retroactivecipa demand lettercalifornia invasion of privacy actCIPAPenal Code 638.51CCPAhttps://peekwell.org/blog/ccpa-fines/https://peekwell.org/blog/ccpa-fines/CCPA fines in 2026: what Disney, Ford, PlayOn and GM paid for, why most cases turn on opt-outs, and how to test your own Do Not Sell or Share link.Thu, 22 Oct 2026 00:00:00 GMTccpa finesccpa penaltiesccpa violationsccpa enforcementccpa enforcement actionsdisney ccpa settlementcppa enforcementCCPAGlobal Privacy ControlCivil Code 1798.155https://peekwell.org/blog/hims-and-hers-lawsuit/https://peekwell.org/blog/hims-and-hers-lawsuit/The Hims and Hers lawsuit for site owners: what the FTC alleges about tracking pixels, charging after a form and cancelling, and how to check your site.Thu, 22 Oct 2026 00:00:00 GMThims and hers lawsuithims lawsuithims ftchims and hers ftcrestore online shoppers confidence actmeta pixel lawsuitROSCAFTC Act section 5Utah Consumer Sales Practices ActCalifornia Unfair Competition Lawhttps://peekwell.org/blog/pseudonymised-data/https://peekwell.org/blog/pseudonymised-data/Pseudonymised data can be personal data for you and not for the company you send it to. What the EU court decided, and what it means for hashed emails.Thu, 22 Oct 2026 00:00:00 GMTpseudonymised datapseudonymisationpseudonymizationwhat is pseudonymised dataanonymised vs pseudonymisedis pseudonymised data personal dataanonymized datade-identified datahashed emailis ip address personal dataEDPS v SRBGDPRUK GDPRhttps://peekwell.org/blog/how-to-remove-a-google-review/https://peekwell.org/blog/how-to-remove-a-google-review/How to remove a Google review as a business owner: what Google takes down, how to report and appeal, and the review rules your own site has to follow.Wed, 21 Oct 2026 00:00:00 GMThow to remove a google reviewhow to delete a google reviewgoogle review removalcan you remove google reviewsremove negative google reviewsfake google reviewsreport a google reviewhow to remove fake google reviewscan a business delete google reviewsgoogle review policyFTC Consumer Review RuleDMCC ActOmnibus Directivehttps://peekwell.org/blog/data-processing-agreement/https://peekwell.org/blog/data-processing-agreement/A data processing agreement in plain words: what Article 28 asks, which website tools need one, where vendors keep theirs, and how to check your own.Tue, 20 Oct 2026 00:00:00 GMTdata processing agreementwhat is a dpa agreementwhat is a data processing agreementgdpr article 28article 28 gdprdata processing addendumdata processing agreement templatedpa templatewhen is a data processing agreement requiredGDPRUK GDPRCCPAhttps://peekwell.org/blog/security-headers/https://peekwell.org/blog/security-headers/Security headers for site owners: HSTS, CSP, X-Frame-Options and the rest, where to set them on your host, and how to check yours in a minute.Tue, 20 Oct 2026 00:00:00 GMTsecurity headerscheck security headerswhat is hstsx-frame-optionscsp headerx content type optionsreferrer policypermissions policyhttp security headersx-xss-protectionsecurity.txt fileGDPRUK GDPRFTC Acthttps://peekwell.org/blog/ada-compliance-checklist/https://peekwell.org/blog/ada-compliance-checklist/An ADA compliance checklist for a small business website, built on WCAG 2.1 AA: alt text, keyboard use, contrast, focus, forms, captions and headings.Sat, 10 Oct 2026 00:00:00 GMTada compliance checklistwcag checklistada website compliance checklistWCAG 2.1 AAWCAG 2.2Americans with Disabilities ActEuropean Accessibility ActEquality Act 2010https://peekwell.org/blog/ada-website-lawsuits/https://peekwell.org/blog/ada-website-lawsuits/Website accessibility lawsuits, explained for a small business: how a demand letter reads, why overlays didn't stop them, and a phone check for your site.Sat, 10 Oct 2026 00:00:00 GMTwebsite accessibility lawsuitsada website lawsuitaccessibility overlayaccessibeADA Title IIIUnruh ActWCAGhttps://peekwell.org/blog/ccpa-compliance-checklist/https://peekwell.org/blog/ccpa-compliance-checklist/CCPA compliance for a website in one checklist: thresholds, the Do Not Sell or Share link, Global Privacy Control, the notice at collection and the policy.Sat, 10 Oct 2026 00:00:00 GMTccpa complianceccpa compliance checklistccpa requirementsgdpr vs ccpawho does ccpa apply toCCPACPRAGlobal Privacy Controlhttps://peekwell.org/blog/gdpr-compliance-checklist/https://peekwell.org/blog/gdpr-compliance-checklist/A GDPR compliance checklist for a company website: the 15 things a visitor's browser can see, from cookies and consent to rights routes and trader details.Sat, 10 Oct 2026 00:00:00 GMTgdpr compliance checklistgdpr checklistgdpr compliance for websitesdoes gdpr apply to us companiesGDPRePrivacy DirectiveArticle 13https://peekwell.org/blog/junk-fees/https://peekwell.org/blog/junk-fees/Junk fees in the US: the FTC fees rule, the FTC's 2026 cases, the state laws from California to Colorado, and a five-minute check of your own checkout.Sat, 10 Oct 2026 00:00:00 GMTjunk feeshidden feesjunk fee laws by statedrip pricingFTC fees ruleSB 478total pricehttps://peekwell.org/blog/types-of-website-cookies/https://peekwell.org/blog/types-of-website-cookies/Session, persistent, first and third party, strictly necessary, functional, analytics, marketing: the types of cookies on websites and which need consent.Sat, 10 Oct 2026 00:00:00 GMTtypes of cookies on websitesfunctional cookiessession cookies vs persistent cookiesfirst party vs third party cookiesstrictly necessary cookiesanalytics cookiesePrivacy DirectivePECRhttps://peekwell.org/blog/dark-patterns-examples/https://peekwell.org/blog/dark-patterns-examples/Dark patterns examples with a named enforcement case for each: confirmshaming, roach motel, fake countdowns, drip pricing, pre-ticked boxes and more.Fri, 09 Oct 2026 00:00:00 GMTdark patterns examplesroach motel dark patternconfirmshamingdark patterns uxFTC ActDMCC ActUCPDhttps://peekwell.org/blog/incentivized-reviews/https://peekwell.org/blog/incentivized-reviews/Incentivized reviews, review gating and bought reviews under the FTC rule, the UK DMCC Act and the EU Omnibus rule, and a check of your own reviews page.Fri, 09 Oct 2026 00:00:00 GMTincentivized reviewsreview gatingbuying reviewsfake reviewsFTC Consumer Review RuleDMCC ActOmnibus Directivehttps://peekwell.org/blog/personal-data-examples/https://peekwell.org/blog/personal-data-examples/What is personal data? GDPR and UK GDPR examples from a real website: IP addresses, cookie IDs, form fields, support emails, and what your notice lists.Fri, 09 Oct 2026 00:00:00 GMTwhat is personal datapersonal data examplesGDPR Article 4special category dataUK GDPRIP addressprivacy noticehttps://peekwell.org/blog/privacy-policy-example/https://peekwell.org/blog/privacy-policy-example/A privacy policy example you can read in five minutes: sample wording for each section, plus what EU, UK and US rules add. Written for a small company.Fri, 09 Oct 2026 00:00:00 GMTprivacy policy exampleprivacy notice templatewhat to include in a privacy policyGDPR Article 13UK GDPRCalOPPACCPAhttps://peekwell.org/blog/right-to-be-forgotten/https://peekwell.org/blog/right-to-be-forgotten/The right to be forgotten lets people ask you to delete their data. When it applies, when it doesn't, and what your website should say about it.Fri, 09 Oct 2026 00:00:00 GMTright to be forgottenright to erasureright to erasure gdprGDPR Article 17UK GDPRCCPAdata subject rightshttps://peekwell.org/blog/tracking-pixel/https://peekwell.org/blog/tracking-pixel/A tracking pixel is a tiny image or script that reports a visit to an outside server. What it collects, what regulators did about it, and a phone check.Fri, 09 Oct 2026 00:00:00 GMTtracking pixelwhat is a tracking pixelmeta pixel gdpris pixel tracking legalePrivacy DirectivePECRFTC Acthttps://peekwell.org/blog/what-is-a-dsar/https://peekwell.org/blog/what-is-a-dsar/A DSAR is a request for a copy of someone's personal data. What it covers, the one-month clock, what to leave out, and how to set up a route on your site.Fri, 09 Oct 2026 00:00:00 GMTdsarwhat is a dsardsar templatesubject access requestUK GDPR Article 15GDPR Article 15right of accesshttps://peekwell.org/blog/check-website-cookies/https://peekwell.org/blog/check-website-cookies/How to check website cookies and tracking requests on your own site with a phone or your browser, and what to look for before and after the banner.Thu, 08 Oct 2026 00:00:00 GMTcheck website cookiescookie checkercookie scannercookie audithow to check cookies on a websiteePrivacy DirectivePECRhttps://peekwell.org/blog/cookie-banner-examples/https://peekwell.org/blog/cookie-banner-examples/Cookie consent examples in words: equal buttons, pre-ticked boxes, cookie walls and legitimate interest toggles, with what EU and UK regulators said.Thu, 08 Oct 2026 00:00:00 GMTcookie consent examplescookie banner examplescookie banner best practicescookie banner designreject all cookiesePrivacy DirectivePECRhttps://peekwell.org/blog/cookie-consent-usa/https://peekwell.org/blog/cookie-consent-usa/Is cookie consent required in the USA? Mostly no banner, but California asks for an opt-out link and a working Global Privacy Control. Here's what to show.Thu, 08 Oct 2026 00:00:00 GMTis cookie consent required in usado i need a cookie banner on my websiteccpa cookie bannerccpa cookie banner requirementswhat states require cookie consentCCPAGlobal Privacy Controlhttps://peekwell.org/blog/cookie-policy-template/https://peekwell.org/blog/cookie-policy-template/A cookie policy template you fill in from your own site: each cookie or tool, its purpose, how long it lasts, who sets it and how to switch it off.Thu, 08 Oct 2026 00:00:00 GMTcookie policy templatecookie policy examplecookie policy vs privacy policyePrivacy DirectivePECRGDPR Article 13https://peekwell.org/blog/google-analytics-gdpr/https://peekwell.org/blog/google-analytics-gdpr/Google Analytics GDPR, from the regulators: the 2022 Austrian, French and Italian decisions, the 2023 Data Privacy Framework, and what to do now.Thu, 08 Oct 2026 00:00:00 GMTgoogle analytics gdpris google analytics gdpr compliantgoogle analytics cookie consentdata privacy frameworkgoogle analytics privacy policyGDPRePrivacy Directivehttps://peekwell.org/blog/google-consent-mode-v2/https://peekwell.org/blog/google-consent-mode-v2/Google consent mode v2 in plain words: basic versus advanced, what it changes in Google's tags, what it leaves to you, and a phone check for your own site.Thu, 08 Oct 2026 00:00:00 GMTgoogle consent mode v2consent mode v2basic vs advanced consent modegoogle tag manager consent modePECRGDPRePrivacy Directivehttps://peekwell.org/blog/opt-in-vs-opt-out/https://peekwell.org/blog/opt-in-vs-opt-out/Opt in vs opt out, explained for a small company: GDPR consent, the UK soft opt-in under PECR, CAN-SPAM's opt-out, and a phone check for your own forms.Thu, 08 Oct 2026 00:00:00 GMTopt in vs opt outsoft opt inemail marketing gdpremail marketing lawsopt in vs opt out examplesPECRCAN-SPAM Acthttps://peekwell.org/blog/drip-pricing/https://peekwell.org/blog/drip-pricing/Drip pricing adds mandatory fees late in checkout. See what the UK and US rules say, two 2026 CMA decisions, and a five-minute check for your own site.Wed, 07 Oct 2026 00:00:00 GMTdrip pricinghidden feestotal pricecheckoutDMCC Act