Cookieless Newsroom

Apple in European Regulatory Hot Water

In this edition of the Cookieless Newsroom, we spotlight pivotal updates from Europe. The European Data Protection Supervisor clarifies that pseudonymized data remains non-personal if re-identification is unfeasible, while French and German regulators are poised to take decisive action against Apple’s anti-competitive practices under the DMA.

Last Updated:
Published:

Navigate to the hottest topics:


10 March: First-id is adopted by Jacadi via its CMP Axeptio, delivering strong results in A/B tests against third-party cookies for retargeting campaigns. [ExchangeWire]

8 March: The U.S. Department of Justice (DOJ) persists in its efforts to dismantle Google, with its revised antitrust trial proposal calling for the sale of Chrome. [The Verge]

6 March: Publicis acquires Lotame to bolster its Epsilon identity graph, strengthening its data-driven marketing capabilities. [Digiday]

27 February: French regulators are expected to order Apple to halt its anti-competitive App Tracking Transparency practices next month, with fines reaching up to 10% of Apple’s global turnover under the DMA. [Reuters]

25 February: Liveramp announces Cross-Media Intelligence, leveraging its Data Clean Room—enhanced by last year’s Hubu acquisition—to offer brands a comprehensive, multi-channel view of campaign performance across networks, including TTD, Amazon, Roku, and Meta. [Liveramp]

19 February: LinkedIn launches its own Conversion API (CAPI), enabling marketers to leverage first-party data—such as event attendance, email sign-ups, and phone records—for enhanced measurement. [AdExchanger]

13 February: After years of investigation, German competition authorities claim that Apple may be unfairly leveraging its App Tracking Transparency (ATT) framework for competitive advantage. [Techcrunch]

12 February:

  • IP Protection Update: A new update rolls out for IP Protection, initially active in Incognito Mode using a two-hop proxy scheme reminiscent of iCloud Private Relay. Entities on the Disconnect.me-based Masked Domain List will be affected in the third-party context, while other websites remain unaffected. [GitHub]

  • ePrivacy Directive Abandoned: The European Commission abandons its efforts to update Europe’s ePrivacy directive. [Techcrunch]

11 February:

  • Privacy Sandbox Case Study: The Privacy Sandbox publishes a PAAPI case study from SMN, a Japanese DSP, spotlighting Flexible Event-Level Configurations and an ever-evolving Latency Best Practices Guide. [Privacy Sandbox]

EDPS on Pseudonymization: The European Data Protection Supervisor (EDPS) asserts that if recipients lack “reasonable means” to re-identify pseudonymized or key-coded IDs, the data in their possession is not considered personal. [LinkedIn]

More Articles

See our reports, articles, guides, videos, and more.