Recently, Kaamel's work in the field of data privacy and security was recognized in a news report by Adweek. The Adweek article highlights the current state of using cookies for tracking and collecting personal data.
In simple terms, cookies are a technology that stores small text files on a user's device when they visit websites; they are stored in the browser and are used for remembering user information, tracking behavior, and advertising purposes. While enhancing user experience, they also raise concerns about privacy and data protection. These cookie-like technologies include pixels, ad trackers, beacons, keylogging, canvas fingerprinting, etc. In the EU, besides the well-known GDPR, there is also the ePrivacy Directive and a series of official guidelines that comprehensively manage the use of cookies. In the U.S., although there is no specific data privacy law like the ePrivacy Directive, the use of these technologies is considered part of data processing and must comply with privacy regulations. Recent cases of pixel-related complaints and regulatory penalties have surged. Despite this, many companies continue to neglect the proper management and use of cookie-like technologies.
Adweek Report
Adweek, after speaking with privacy compliance experts including Kaamel CEO Bu Zheng, found that despite the introduction of strict data protection laws in many countries and regions, most companies still fail to meet these requirements. For example, many websites use third-party cookies to track users without their consent or despite users explicitly opting out.
Global data protection regulations impose hefty fines. Companies violating the European General Data Protection Regulation (GDPR) could face fines of up to 20 million euros or 4% of annual global revenue (whichever is higher). Companies violating the California Consumer Privacy Act (CCPA) could face fines of up to $2,500 per violation ($7,500 for intentional violations or those involving children). However, Kaamel's survey of 64 Fortune 500 companies catering to European consumers found that 70% of them failed to comply with GDPR requirements. Privacy platform DataGrail analyzed 5,000 randomly sampled high-traffic websites and found that 75% of them did not comply with CCPA's "Do Not Sell" requirements.
The complexity of compliance is the main reason for this phenomenon. On the one hand, privacy laws are becoming increasingly stringent and regulatory requirements more detailed. On the other hand, there are technical challenges to compliance. For example, many websites use uncategorized cookies that may inadvertently violate user preferences, and some cookies are embedded in websites, requiring site rebuilding to meet user preferences.
Compliance and Development
As mentioned in the Adweek article, Kaamel's CEO Bu Zheng noted, "We observe a gap between compliance teams and development teams." This gap arises from their different goals. Compliance teams focus on ensuring laws are followed, which may involve reviewing and supervising the work of development teams to ensure privacy design requirements are met throughout the product development process. This oversight can inevitably extend development cycles and impact business operations. Additionally, communication costs arise due to differences in terminology and work backgrounds between teams, further complicating the review process. In some cases, this communication barrier can even lead to overlooked errors.
In these areas, we can help. Kaamel's team brings together legal and compliance experts along with technical specialists. We translate legal requirements and technical standards into actionable solutions, helping you tackle the challenges of data privacy compliance.
We want to express our gratitude for Adweek's recognition and thank all the friends who support our work. Your acknowledgment drives us to continue advancing our mission of Privacy Made Easy.
