Privacy, explained plainly.

Guides to the GDPR, cookie consent, privacy requests and the documents your business needs. Each one answers the question first, then shows the article behind it.

Checklists and referenceGDPR checklist for small businesses: 15 things to have in placeA plain-language GDPR checklist for small businesses, grouped by topic. Each of the 15 items says why it matters, which article applies and which guide helps.8 October 2026 · 7 min read Privacy software marketHow much does privacy software cost? Typical prices by category in 2026Published prices for cookie consent tools, policy generators and all-in-one workspaces as of November 2026, what drives the bill and which categories only sell by quote.4 November 2026 · 8 min read Laws around the worldPrivacy laws around the world: a plain-language overview for 2026A plain-language guide to the main privacy laws in 2026, from the GDPR and UK GDPR to US state laws, Canada, Brazil, Australia, Chile and India, with deadlines and regulators.4 November 2026 · 10 min read Inside PrivacyboardPrivacyboard pricing: what is free, what is Pro and why it is per workspacePrivacyboard is free to set up. Pro adds the public privacy center, the cookie banner and teams, per workspace. See exactly what each plan includes, how billing works and who needs Pro.4 November 2026 · 4 min read Laws around the worldGDPR fines in numbers: what regulators have actually imposedGDPR fines in numbers: totals from DLA Piper and the CMS Enforcement Tracker, the largest fines, the Article 83 tiers, the most common causes and what small organisations actually face.3 November 2026 · 9 min read Inside PrivacyboardHow the Privacyboard vendor catalog is verified: every page opened and readHow we check each tool in the Privacyboard vendor catalog: which pages we open, what a verified entry proves and does not prove, how data regions are sourced and how we keep entries fresh.3 November 2026 · 6 min read Privacy software marketHow to choose privacy software for a small business: 9 questions to askNine practical questions to ask before you buy privacy software, from laws covered and consent proof to hosting, exit, pricing model and red flags, plus a scoring table.3 November 2026 · 8 min read Privacy software marketThe privacy software market in 2026: the main categories and which one you needCookie consent platforms, policy generators, request tools, privacy suites, trust centers and all-in-one workspaces: what each category does, who it suits and how to pick one.2 November 2026 · 8 min read Inside PrivacyboardWhy we built Privacyboard: one source of truth for your privacy recordsThe story behind Privacyboard: why a privacy policy, a vendor list and a cookie banner drift apart, the principles we build on, and what the product deliberately does not do.2 November 2026 · 6 min read Vendors and transfersVendor privacy due diligence: a 12-point checklist before you signA 12-point checklist for checking any tool before it touches personal data: role, DPA, sub-processors, data location, security, breach timing, deletion, audits, AI use and cookies.30 October 2026 · 9 min read Cookies and consentHow to find every cookie and tracker on your website (step by step)Use your browser's developer tools to list every cookie and tracker your site sets, compare before and after consent, classify each one and document it.29 October 2026 · 8 min read Laws around the worldGlobal Privacy Control (GPC): what it is and who has to honour itWhat Global Privacy Control is, which US states require businesses to honour it, how it differs from Do Not Track, how a website should handle it and how to test it in a browser.28 October 2026 · 9 min read Vendors and transfersInternational data transfers: SCCs and the EU-US Data Privacy FrameworkHow to transfer personal data outside the EEA under the GDPR, from adequacy decisions to Standard Contractual Clauses and the EU-US Data Privacy Framework, and how to check your vendors.27 October 2026 · 5 min read Laws around the worldGDPR vs CCPA/CPRA: the differences that matter for small businessesHow the GDPR and California's CCPA/CPRA differ on scope, consent versus opt-out, rights, 30-day versus 45-day deadlines, fines and enforcement, with a side-by-side table.26 October 2026 · 9 min read Cookies and consentGoogle Consent Mode v2 explained for small businessesWhat Google Consent Mode v2 is, the four consent signals it uses, the difference between basic and advanced mode and how it relates to your cookie banner and the GDPR.21 October 2026 · 5 min read BreachesData breach notification templates: authority and customer messagesTwo adaptable GDPR data breach notification templates, one for the supervisory authority and one for affected people, plus an internal incident log you can copy.20 October 2026 · 8 min read BreachesPersonal data breach: the 72-hour rule and what to doWhat counts as a personal data breach under the GDPR, when you must notify the authority within 72 hours, when you must tell the people affected and what to record, step by step.19 October 2026 · 5 min read Checklists and referencePrivacy and GDPR glossary: 40+ terms in plain EnglishA plain-English privacy and GDPR glossary with more than 40 terms, from adequacy decision and controller to DSAR, SCCs and Global Privacy Control, with article references.16 October 2026 · 10 min read Vendors and transfersData processing agreement (DPA): when you need one and what it must containWhat a GDPR data processing agreement is, when Article 28 requires one, the eight things it must say, and how to handle the standard DPAs offered by vendors and the ones you owe your clients.15 October 2026 · 5 min read Rights and requestsData subject request reply templates: access, erasure and moreCopy-and-adapt reply templates for GDPR data subject requests: acknowledgement, identity check, access, erasure done or refused, extension and refusal, with the deadlines.14 October 2026 · 10 min read Rights and requestsHow to respond to a GDPR data subject access request (DSAR)A step-by-step guide to answering an access request within the one-month GDPR deadline: checking identity, finding the data, what to include in the reply and when you can extend or refuse.13 October 2026 · 5 min read Policies and recordsRecord of processing activities (Article 30): does a small business need one?What a GDPR record of processing activities contains, who must keep one, how the Article 30(5) exemption for small organisations really works and how to build a useful register.12 October 2026 · 4 min read Trust and transparencyWhat is a privacy center, and what should it include?A privacy center is a public page where a company shows its privacy policy, vendors, data locations and a request form. Learn what to put on it, why customers ask for one and how to keep it accurate.9 October 2026 · 4 min read Cookies and consentGDPR cookie consent: what the rules actually requireWhen you need consent for cookies, what valid consent looks like under the ePrivacy Directive and the GDPR, and what a cookie banner has to do, step by step.7 October 2026 · 5 min read Policies and recordsWhat to include in a GDPR privacy policy (checklist)The information Articles 13 and 14 of the GDPR require in a privacy policy, as a checklist, with what each item means in practice and the mistakes to avoid.6 October 2026 · 5 min read