Tracking with consent: what you need to know about cookie pop-ups
Describe actual purposes and make choices affect scripts. Check network behaviour after refusal rather than only dismissing a banner.
Putting data and access into practice
Define purpose, scope, access and retention before collection. Public display, internal processing and sensitive information need distinct permissions.
Checking the result
Complete a workflow with minimal data and identify owners for access, correction and deletion. Responsible specialists must separately confirm applicable legal or sector requirements.


