SlideShare a Scribd company logo
5
Most read
12
Most read
© 2025 TrustArc Inc. Proprietary and Confidential Information.
Click, Consent, Trust:
Winning the Privacy Game
2
Legal Disclaimer
The information provided during this webinar does
not, and is not intended to, constitute legal advice.
Instead, all information, content, and materials presented during
this webinar are for general informational purposes only.
3
Speakers
Paria Asadbikli
Global Privacy Manager
TrustArc
Darren Abernethy
Shareholder
Greenberg Traurig
Agenda
1. Consumer Trust: What Does It Mean?
2. Data Privacy Laws and Compliance
3. Cookie Compliance and Management
4. Wiretapping Mitigation
5. Dark Patterns
5
Consumer Trust: What Does It Means?
Insights from consumer data:
● Understand preferences, trends, and behaviors
● Use it to:
○ Improve user experience
○ Develop new products and services
○ Personalize advertising
● People have become increasingly conscious of the
significance and worth of their data:
○ They are hesitant to share their personal information.
○ They want to be informed about how organizations are using
their data.
○ Privacy has become a critical element in consumers'
decision-making process.
○ We expect it to become even more significant as we witness
more technological advancements that could significantly
affect consumers' privacy.
6
● Transparency
● Consent
● Individual’s Rights
● Robust Security Measures
● Privacy By Design
Data Privacy Laws and Compliance
7
Cookie Compliance and Management
People preferred and have more
trust and feel safer when the
cookie notice presented to them is
multiple choice and gives them
the ability to not only accept or
refuse, but also to select what
purposes and partners they
want to accept.
THE IMPACT OF COOKIE NOTICES IN CONSUMER'S TRUST IN NEWS MEDIA WEBSITES by DZ
Troeira · 2021
Approximately 50% users simply accept everything when presented with
the notices and around 55% rarely reads the information given or never.
!
8
Consumer Trust and Regular Areas of Regulatory Review
● Dark patterns
● State UDAP statutes and the FTC’s authority
in relation to unfair and deceptive trade
practices
● Wiretapping / state recording statutes
● Compliance with state privacy laws, including
transparency and consent provisions
● Transfer of sensitive information to third
parties through technologies like pixels or
CAPIs
9
Areas of Common Concern Involving Cookie Consent
● Miscategorization of cookies/trackers in a CMP
● Lack of an underlying contract or data process addendum clarifying the
relationships of the parties under applicable state/federal/international law
● Misconfiguration issues, including with Global Privacy Control signals
● Setting it up for different geographic markets (e.g., reverse IP and different
UX based on where visitor is inferred to reside)
● Dark pattern issues around font color, size, placement of buttons, etc.
● Treatment of non-cookies, and coordination with site tag managers
● Discrepancy between PP/Cookie Policy and consent tool setup
10
Tracker Consent Habits for Success
● Transparent notices re: tracking practices
● Clear lines of responsibility within the organization among who “owns” what
in this area…e.g., coordination among Marketing, Legal, Engineering, etc.
to avoid silos
● Having a documented “standard operating procedure” for adding new
trackers to a website or SDKs to a mobile app
● Regular testing…both your own internal tool testing but also from the point
of view of a website visitor
● Being user friendly and clear of dark patterns
11
Wiretapping Pitfalls and Mitigation
● Federal and state standards…and P’s bar attempt to shift
from the telephone context to the Internet
● States like CA allow a private right of action for an injunction with statutory
penalties of $5,000 per violation and treble actual damages (if any)
● What activities are regulated by CIPA?
● Common subject of legal claims? Session replay, chatbot, SM pixels,
online credit card transactions, etc.
12
Wiretapping Mitigation and Habits for Success
● Contracts restricting the vendor’s use of the data collected
● Geo-consent management for cookies/pixels/chatbots, and opt-outs or
opt-ins depending on the business risk appetite
● Being mindful of naming pixel “custom” events and the placement of pixels
on certain pages…e.g., non-authenticated pages and pages where
sensitive personal info may be transmitted. (e.g., don’t call it “event for hair
loss” or something else that seems to give an indication about health)
● Privacy policy updates
● Review of vendor’s features/tools, such as session replay providers
allowing for obfuscation of IP addresses or credit card numbers (and not
placing the technology on pages with SSN, financial info, health info, etc.)
13
Movement Away from Cookies – Other Possibilities
• Solutions Are Still Taking Shape, But The Key Areas Include:
• First- (and zero-)party data—in many ways, the new coin of the realm
• Contextual advertising—AI/ML have supercharged opportunities for ad placements
• Universal identifiers—creation of deterministic, omnichannel IDs via phone & email
• Data clean rooms—matching large platform data with 1st
party data in strictly controlled
environments
• Identity graphs—combining 1st
party data with licensed identity graphs
• New ad forms and platforms (e.g., airline seat TVs, banking purchase data, etc.)
• Retail media networks
• Other avenues…the IAB Tech Lab’s Seller-Defined Audiences, PETs like k-anonymity, private
marketplaces, cohort targeting, generative AI, and more.
14
Dark Patterns - What Are They?
● What are they?
● Common examples
○ Easy to sign up, hard to unsubscribe/cancel
○ Hidden costs added late/at checkout
○ Confusing ads that appear to be content and trick people into clicking
○ Shaming users (“No, I don’t want to save money”)
○ Creating false scarcity or urgency…like a countdown timer that isn’t real
○ Using coloring, fonts, movement to draw attention to or from something
15
Dark Patterns - How to Prevent Loss of Consumer Trust
● Be focused on symmetry in choice (e.g., if “accept all,” then also include “decline
all”)
● Make language easy to understand–can use free programs to check the
readability of policies or pop-up notices
● Review whether the path to a consumer saying “no” is longer than the path to
saying “yes”
● Don’t hide important disclosures
16
Consumer Requests
● Purpose limitation – don’t collect more data than is necessary!
● Be mindful of non-compatible secondary uses of PI, such as in relation to SPI
● Don’t require verification for opting out of sales/sharing or limiting use of SPI
● Don’t require verification for authorized agents to opt out of sell/share/SPI
● Make a business decision as to how to apply consumer rights
● Unified consent across consumer account touchpoints?
17
Thank You!

More Related Content

PDF
TrustArc Webinar - Cross-Contextual-Advertising: Rethinking How Consumer Data...
PDF
Knowing Me, Knowing You - Managing & Using Contact Information
PDF
TrustArc Webinar - How to Build Consumer Trust Through Data Privacy
PPT
Nytlegal #56866-v3-ona 2013-_ds_draft
PDF
Mobile Web and Apps World New Orleans Session 10 Patricia Poss Federal Trade ...
PDF
TrustArc Webinar - The Ultimate Balancing Act: Using Consumer Data and Maint...
PDF
Cookies
PDF
TrustArc Webinar - Consumer Expectations vs Corporate Realities on Data Broke...
TrustArc Webinar - Cross-Contextual-Advertising: Rethinking How Consumer Data...
Knowing Me, Knowing You - Managing & Using Contact Information
TrustArc Webinar - How to Build Consumer Trust Through Data Privacy
Nytlegal #56866-v3-ona 2013-_ds_draft
Mobile Web and Apps World New Orleans Session 10 Patricia Poss Federal Trade ...
TrustArc Webinar - The Ultimate Balancing Act: Using Consumer Data and Maint...
Cookies
TrustArc Webinar - Consumer Expectations vs Corporate Realities on Data Broke...

Similar to TrustArc Webinar - Click, Consent, Trust: Winning the Privacy Game (20)

PDF
TrustArc Webinar - Cookie and Trackers: Understanding the Technology and Regu...
PDF
DMA Cookies update
PPTX
Trending Topics in Data Collection & Targeted Marketing
PPT
C8-Ethical, Social, & Political Issues in Ecommerce.PPT
PDF
Avoiding Privacy Pitfalls When Using Big Data in Marketing
PPTX
DPS TRUSTE Pitch-a-Kucha
PDF
The Data Dilemma: How Can Consumers Trust Brands with Personal Information
PDF
TrustArc Webinar - Managing Online Tracking Technology Vendors: A Checklist f...
PDF
When Past Performance May Be Indicative of Future Results - The Legal Implica...
PPTX
A Marketer’s Guide to Internet of Things Legal Issues
PDF
TrustArc Webinar - Into The Future: The Evolution of AdTech & Data Privacy
PPT
Ppt by
PDF
TrustUX: balancing personalisation and privacy to create understanding and tr...
PDF
The DMA conference 2012
PDF
Everything B2B Tech Marketers Need to Know About Privacy + Consent
PDF
2017: Privacy Issues on the Horizon
PDF
The Digital Privacy Equation
PDF
Cloud Privacy
PPTX
Cloud Privacy Update: What You Need to Know
PPT
Ethics, Law, and E-commerce
TrustArc Webinar - Cookie and Trackers: Understanding the Technology and Regu...
DMA Cookies update
Trending Topics in Data Collection & Targeted Marketing
C8-Ethical, Social, & Political Issues in Ecommerce.PPT
Avoiding Privacy Pitfalls When Using Big Data in Marketing
DPS TRUSTE Pitch-a-Kucha
The Data Dilemma: How Can Consumers Trust Brands with Personal Information
TrustArc Webinar - Managing Online Tracking Technology Vendors: A Checklist f...
When Past Performance May Be Indicative of Future Results - The Legal Implica...
A Marketer’s Guide to Internet of Things Legal Issues
TrustArc Webinar - Into The Future: The Evolution of AdTech & Data Privacy
Ppt by
TrustUX: balancing personalisation and privacy to create understanding and tr...
The DMA conference 2012
Everything B2B Tech Marketers Need to Know About Privacy + Consent
2017: Privacy Issues on the Horizon
The Digital Privacy Equation
Cloud Privacy
Cloud Privacy Update: What You Need to Know
Ethics, Law, and E-commerce
Ad

More from TrustArc (20)

PDF
TrustArc Webinar - Navigating Data Privacy in LATAM: Laws, Trends, and Compli...
PDF
TrustArc Webinar - Data Privacy Trends 2025: Mid-Year Insights & Program Stra...
PDF
TrustArc Webinar - Navigating APAC Data Privacy Laws: Compliance & Challenges
PDF
TrustArc Webinar - 2025 Global Privacy Benchmarks Survey: Trends and Perspect...
PDF
TrustArc Webinar - Mastering Privacy Contracting: Key Clauses, Risks & Negoti...
PDF
TrustArc Webinar - Cross-Border Data Transfers in 2025: Regulatory Changes, A...
PDF
TrustArc Webinar - Data Privacy and Cyber Security: A Symbiotic Relationship
PDF
TrustArc Webinar - Strategies for Future-Proofing Privacy for Healthcare
PDF
TrustArc Webinar - How to Create a Privacy-First Culture
PDF
TrustArc Webinar - Building your DPIA/PIA Program: Best Practices & Tips
PDF
TrustArc Webinar - State of State Privacy Laws
PDF
TrustArc Webinar - Data Privacy Management in the Age of AI
PDF
TrustArc Webinar - Data Privacy in the EU: What You Need To Know
PDF
TrustArc Webinar - Data Privacy: Looking to 2025 and Beyond
PDF
TrustArc Webinar - Elevate Your Business: Unpack the Power of Privacy Certifi...
PDF
TrustArc Webinar - PrivacyCentral: Keep Pace with Global Privacy Laws & Autom...
PDF
TrustArc Webinar - Everything You Need To Know About Global CBPR But Are Afra...
PDF
TrustArc Webinar - Master Your Data Inventory And Meet Your ROPA Requirements
PDF
TrustArc Webinar - AI Governance: Managing AI Risk
PDF
TrustArc Webinar - How to Build a Vendor Risk Management Program
TrustArc Webinar - Navigating Data Privacy in LATAM: Laws, Trends, and Compli...
TrustArc Webinar - Data Privacy Trends 2025: Mid-Year Insights & Program Stra...
TrustArc Webinar - Navigating APAC Data Privacy Laws: Compliance & Challenges
TrustArc Webinar - 2025 Global Privacy Benchmarks Survey: Trends and Perspect...
TrustArc Webinar - Mastering Privacy Contracting: Key Clauses, Risks & Negoti...
TrustArc Webinar - Cross-Border Data Transfers in 2025: Regulatory Changes, A...
TrustArc Webinar - Data Privacy and Cyber Security: A Symbiotic Relationship
TrustArc Webinar - Strategies for Future-Proofing Privacy for Healthcare
TrustArc Webinar - How to Create a Privacy-First Culture
TrustArc Webinar - Building your DPIA/PIA Program: Best Practices & Tips
TrustArc Webinar - State of State Privacy Laws
TrustArc Webinar - Data Privacy Management in the Age of AI
TrustArc Webinar - Data Privacy in the EU: What You Need To Know
TrustArc Webinar - Data Privacy: Looking to 2025 and Beyond
TrustArc Webinar - Elevate Your Business: Unpack the Power of Privacy Certifi...
TrustArc Webinar - PrivacyCentral: Keep Pace with Global Privacy Laws & Autom...
TrustArc Webinar - Everything You Need To Know About Global CBPR But Are Afra...
TrustArc Webinar - Master Your Data Inventory And Meet Your ROPA Requirements
TrustArc Webinar - AI Governance: Managing AI Risk
TrustArc Webinar - How to Build a Vendor Risk Management Program
Ad

Recently uploaded (20)

PPTX
MicrosoftCybserSecurityReferenceArchitecture-April-2025.pptx
PPTX
1. Introduction to Computer Programming.pptx
PPTX
Tartificialntelligence_presentation.pptx
PDF
Assigned Numbers - 2025 - Bluetooth® Document
PDF
Hybrid model detection and classification of lung cancer
PPTX
TLE Review Electricity (Electricity).pptx
PDF
2021 HotChips TSMC Packaging Technologies for Chiplets and 3D_0819 publish_pu...
PDF
ENT215_Completing-a-large-scale-migration-and-modernization-with-AWS.pdf
PDF
DP Operators-handbook-extract for the Mautical Institute
PPTX
Chapter 5: Probability Theory and Statistics
PDF
Univ-Connecticut-ChatGPT-Presentaion.pdf
PDF
Developing a website for English-speaking practice to English as a foreign la...
PPTX
TechTalks-8-2019-Service-Management-ITIL-Refresh-ITIL-4-Framework-Supports-Ou...
PDF
STKI Israel Market Study 2025 version august
PDF
Profit Center Accounting in SAP S/4HANA, S4F28 Col11
PDF
A novel scalable deep ensemble learning framework for big data classification...
PDF
August Patch Tuesday
PDF
Getting Started with Data Integration: FME Form 101
PPTX
cloud_computing_Infrastucture_as_cloud_p
PDF
Web App vs Mobile App What Should You Build First.pdf
MicrosoftCybserSecurityReferenceArchitecture-April-2025.pptx
1. Introduction to Computer Programming.pptx
Tartificialntelligence_presentation.pptx
Assigned Numbers - 2025 - Bluetooth® Document
Hybrid model detection and classification of lung cancer
TLE Review Electricity (Electricity).pptx
2021 HotChips TSMC Packaging Technologies for Chiplets and 3D_0819 publish_pu...
ENT215_Completing-a-large-scale-migration-and-modernization-with-AWS.pdf
DP Operators-handbook-extract for the Mautical Institute
Chapter 5: Probability Theory and Statistics
Univ-Connecticut-ChatGPT-Presentaion.pdf
Developing a website for English-speaking practice to English as a foreign la...
TechTalks-8-2019-Service-Management-ITIL-Refresh-ITIL-4-Framework-Supports-Ou...
STKI Israel Market Study 2025 version august
Profit Center Accounting in SAP S/4HANA, S4F28 Col11
A novel scalable deep ensemble learning framework for big data classification...
August Patch Tuesday
Getting Started with Data Integration: FME Form 101
cloud_computing_Infrastucture_as_cloud_p
Web App vs Mobile App What Should You Build First.pdf

TrustArc Webinar - Click, Consent, Trust: Winning the Privacy Game

  • 1. © 2025 TrustArc Inc. Proprietary and Confidential Information. Click, Consent, Trust: Winning the Privacy Game
  • 2. 2 Legal Disclaimer The information provided during this webinar does not, and is not intended to, constitute legal advice. Instead, all information, content, and materials presented during this webinar are for general informational purposes only.
  • 3. 3 Speakers Paria Asadbikli Global Privacy Manager TrustArc Darren Abernethy Shareholder Greenberg Traurig
  • 4. Agenda 1. Consumer Trust: What Does It Mean? 2. Data Privacy Laws and Compliance 3. Cookie Compliance and Management 4. Wiretapping Mitigation 5. Dark Patterns
  • 5. 5 Consumer Trust: What Does It Means? Insights from consumer data: ● Understand preferences, trends, and behaviors ● Use it to: ○ Improve user experience ○ Develop new products and services ○ Personalize advertising ● People have become increasingly conscious of the significance and worth of their data: ○ They are hesitant to share their personal information. ○ They want to be informed about how organizations are using their data. ○ Privacy has become a critical element in consumers' decision-making process. ○ We expect it to become even more significant as we witness more technological advancements that could significantly affect consumers' privacy.
  • 6. 6 ● Transparency ● Consent ● Individual’s Rights ● Robust Security Measures ● Privacy By Design Data Privacy Laws and Compliance
  • 7. 7 Cookie Compliance and Management People preferred and have more trust and feel safer when the cookie notice presented to them is multiple choice and gives them the ability to not only accept or refuse, but also to select what purposes and partners they want to accept. THE IMPACT OF COOKIE NOTICES IN CONSUMER'S TRUST IN NEWS MEDIA WEBSITES by DZ Troeira · 2021 Approximately 50% users simply accept everything when presented with the notices and around 55% rarely reads the information given or never. !
  • 8. 8 Consumer Trust and Regular Areas of Regulatory Review ● Dark patterns ● State UDAP statutes and the FTC’s authority in relation to unfair and deceptive trade practices ● Wiretapping / state recording statutes ● Compliance with state privacy laws, including transparency and consent provisions ● Transfer of sensitive information to third parties through technologies like pixels or CAPIs
  • 9. 9 Areas of Common Concern Involving Cookie Consent ● Miscategorization of cookies/trackers in a CMP ● Lack of an underlying contract or data process addendum clarifying the relationships of the parties under applicable state/federal/international law ● Misconfiguration issues, including with Global Privacy Control signals ● Setting it up for different geographic markets (e.g., reverse IP and different UX based on where visitor is inferred to reside) ● Dark pattern issues around font color, size, placement of buttons, etc. ● Treatment of non-cookies, and coordination with site tag managers ● Discrepancy between PP/Cookie Policy and consent tool setup
  • 10. 10 Tracker Consent Habits for Success ● Transparent notices re: tracking practices ● Clear lines of responsibility within the organization among who “owns” what in this area…e.g., coordination among Marketing, Legal, Engineering, etc. to avoid silos ● Having a documented “standard operating procedure” for adding new trackers to a website or SDKs to a mobile app ● Regular testing…both your own internal tool testing but also from the point of view of a website visitor ● Being user friendly and clear of dark patterns
  • 11. 11 Wiretapping Pitfalls and Mitigation ● Federal and state standards…and P’s bar attempt to shift from the telephone context to the Internet ● States like CA allow a private right of action for an injunction with statutory penalties of $5,000 per violation and treble actual damages (if any) ● What activities are regulated by CIPA? ● Common subject of legal claims? Session replay, chatbot, SM pixels, online credit card transactions, etc.
  • 12. 12 Wiretapping Mitigation and Habits for Success ● Contracts restricting the vendor’s use of the data collected ● Geo-consent management for cookies/pixels/chatbots, and opt-outs or opt-ins depending on the business risk appetite ● Being mindful of naming pixel “custom” events and the placement of pixels on certain pages…e.g., non-authenticated pages and pages where sensitive personal info may be transmitted. (e.g., don’t call it “event for hair loss” or something else that seems to give an indication about health) ● Privacy policy updates ● Review of vendor’s features/tools, such as session replay providers allowing for obfuscation of IP addresses or credit card numbers (and not placing the technology on pages with SSN, financial info, health info, etc.)
  • 13. 13 Movement Away from Cookies – Other Possibilities • Solutions Are Still Taking Shape, But The Key Areas Include: • First- (and zero-)party data—in many ways, the new coin of the realm • Contextual advertising—AI/ML have supercharged opportunities for ad placements • Universal identifiers—creation of deterministic, omnichannel IDs via phone & email • Data clean rooms—matching large platform data with 1st party data in strictly controlled environments • Identity graphs—combining 1st party data with licensed identity graphs • New ad forms and platforms (e.g., airline seat TVs, banking purchase data, etc.) • Retail media networks • Other avenues…the IAB Tech Lab’s Seller-Defined Audiences, PETs like k-anonymity, private marketplaces, cohort targeting, generative AI, and more.
  • 14. 14 Dark Patterns - What Are They? ● What are they? ● Common examples ○ Easy to sign up, hard to unsubscribe/cancel ○ Hidden costs added late/at checkout ○ Confusing ads that appear to be content and trick people into clicking ○ Shaming users (“No, I don’t want to save money”) ○ Creating false scarcity or urgency…like a countdown timer that isn’t real ○ Using coloring, fonts, movement to draw attention to or from something
  • 15. 15 Dark Patterns - How to Prevent Loss of Consumer Trust ● Be focused on symmetry in choice (e.g., if “accept all,” then also include “decline all”) ● Make language easy to understand–can use free programs to check the readability of policies or pop-up notices ● Review whether the path to a consumer saying “no” is longer than the path to saying “yes” ● Don’t hide important disclosures
  • 16. 16 Consumer Requests ● Purpose limitation – don’t collect more data than is necessary! ● Be mindful of non-compatible secondary uses of PI, such as in relation to SPI ● Don’t require verification for opting out of sales/sharing or limiting use of SPI ● Don’t require verification for authorized agents to opt out of sell/share/SPI ● Make a business decision as to how to apply consumer rights ● Unified consent across consumer account touchpoints?