What happens to advertising when the cookie crumbles?
Inventory required events and purposes and minimise identifiers. Plan provenance, consent and retention rather than adding scripts to compensate for uncertainty.
Putting data and access into practice
Define purpose, scope, access and retention before collection. Public display, internal processing and sensitive information need distinct permissions.

Checking the result
Complete a workflow with minimal data and identify owners for access, correction and deletion. Responsible specialists must separately confirm applicable legal or sector requirements.


