# GDPR Published articles for GDPR. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## How Confluent Uses Third-Party Risk Assessments to Support Vendor Due Diligence DevFeed: [How Confluent Uses Third-Party Risk Assessments to Support Vendor Due Diligence]() Original publisher: [Read original article]() Author: Bethany Carter Published: 2026-09-15T16:40:06Z Content type: article Language: en Sources: [Confluent: Data in motion]() Topics: [Security](), [Business Security](), [vulnerability management](), [Cloud]() Tags: [apra](), [automated](), [cloud](), [compliance](), [confluent](), [confluent-cloud](), [data-protection](), [gdpr](), [identity](), [iso](), [nist](), [security](), [standards](), [third-party](), [trust-center](), [vulnerability-management]() ### AI overview Confluent explains how its Trust Center provides third-party risk assessment reports to support vendor security, resilience, compliance, procurement, and customer due diligence. The article describes assessments including ProcessUnity Global Risk Exchange and control mapping to customer frameworks. ### Source excerpt Confluent's Trust Center simplifies vendor risk reviews with CyberGRX, CyberVadis, SIG, CAIQ, and TruSight/KY3P assessments. ## GitLab Dedicated: Compliance for a new regulatory era DevFeed: [GitLab Dedicated: Compliance for a new regulatory era]() Original publisher: [Read original article]() Author: Aathira Nair Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [GitLab]() Topics: [GitLab](), [Software as a service](), [Amazon Web Services](), [Cybersecurity](), [Security](), [Resilience](), [Deployment](), [Testing](), [Multitenancy]() Tags: [amazon-web-services-aws](), [aws](), [compliance](), [deployment](), [gdpr](), [gitlab](), [infrastructure-as-code](), [nis2](), [product](), [regulatory](), [resilience](), [saas](), [security](), [testing]() ### AI overview The article presents GitLab Dedicated as a fully isolated, single-tenant SaaS platform hosted and managed by GitLab in a preferred Amazon Web Services region. It explains how the service is intended to help European enterprises address compliance, data sovereignty, audit readiness, security, resilience, and operational responsibilities related to DORA, NIS2, and GDPR. ### Source excerpt Enforcements such as NIS2 are no longer a future planning consideration. The European Union Agency for Cybersecurity's (ENISA) NIS360 report confirms that supervisory authorities are actively assessing cybersecurity maturity across critical sectors. The agency is moving from guidance and consultation into active oversight, scrutiny, and accountability. This is the regulatory environment European enterprises now operate in. Multi-tenant cloud platforms remove operational overhead but place source code and pipelines on shared infrastructure regulators now scrutinize. Self-managed solutions provide isolation but transfer responsibility for upgrade cycles, security patches, and disaster recovery (DR) tests to an already stretched platform team. Both deployment options leave gaps in risk management, data sovereignty, and furnishing audit evidence. In this article, you'll discover how GitLab Dedicated, a fully isolated, single-tenant SaaS solution deployed in your preferred Amazon Web Services (AWS) region and hosted and managed by GitLab, addresses these challenges and helps you keep pace with evolving compliance requirements. "NatWest Group is adopting GitLab Dedicated SaaS to enable our engineers to use a common cloud engineering platform; delivering new customer and colleague outcomes rapidly, frequently, and securely with high quality, automated testing, on-demand infrastructure, and straight-through deployment." -- Adam Leggett, Platform Lead for Engineering Platforms, NatWest Group Regulations are driving change In the European Union, key regulations are driving the need for a different platform approach. These regulations converge on a decision most enterprises made before they existed: a platform their developers build on. That decision now carries audit consequences it didn't before. Digital Operational Resilience Act (DORA), which came into force across EU financial services in January 2025, requires financial institutions to keep critical technology resilient, ## DORA Compliance for AI Agents: Database Requirements Before Deployment DevFeed: [DORA Compliance for AI Agents: Database Requirements Before Deployment]() Original publisher: [Read original article]() Author: Quentin Packard Published: 2026-08-07T00:00:00Z Content type: article Language: en Sources: [Cockroach Labs]() Topics: [Databases](), [Artificial Intelligence](), [Resilience](), [audit](), [consistency](), [integrity](), [Transactions]() Tags: [ai-agents](), [audit](), [compliance](), [consistency](), [database](), [eu](), [gdpr](), [integrity](), [resilience](), [transactions]() ### AI overview This article explains database capabilities needed by financial AI agents operating under DORA, the EU AI Act, and GDPR. It focuses on auditability, agent identity attribution, strong read consistency, idempotency, rollback and compensating transactions, and data residency. It argues that these database properties help organizations demonstrate operational resilience, traceability, and transaction integrity before deployment. ### Source excerpt Financial AI agents operating under DORA, the EU AI Act, and GDPR need infrastructure that supports operational resilience, traceability, and reliable transaction processing. ## A Privacy-First Analytics API: One Facade, A Provider SPI, And A Consent Gate DevFeed: [A Privacy-First Analytics API: One Facade, A Provider SPI, And A Consent Gate]() Original publisher: [Read original article]() Author: Shai Almog Published: 2026-06-29T00:00:00Z Content type: tutorial Language: en Sources: [CodeName One]() Topics: [API](), [Framework](), [Google Analytics](), [Open Source]() Tags: [analytics](), [api](), [ccpa](), [framework](), [gdpr](), [google-analytics](), [open-source](), [privacy]() ### AI overview This article explains a new analytics facade with a provider SPI and an opt-in consent gate. Reporting calls are withheld until consent is granted, and the design supports multiple analytics providers and granular consent categories. ### Source excerpt A new analytics facade with a provider SPI you can point at any backend and a consent gate that is opt-in by default, so nothing leaves the device until the user agrees. ## Open source Chrome extension recreates LinkedIn from your data exports DevFeed: [Open source Chrome extension recreates LinkedIn from your data exports]() Original publisher: [Read original article]() Author: Alex Ewerlöf Published: 2026-06-28T17:41:27Z Content type: article Language: en Sources: [Alex Ewerlof Notes]() Topics: [Extension](), [Chrome extension](), [Open Source](), [App](), [data](), [CSV](), [GitHub](), [Single-page application (SPA)]() Tags: [app](), [chrome](), [chrome-extension](), [code](), [csv](), [extension](), [gdpr](), [github](), [offline](), [open-source]() ### AI overview The article introduces LinkedOut, a free open-source Chrome extension and offline single-page application that lets users inspect and browse data exported from LinkedIn. It describes the author's findings about the breadth of the export and explains how the app processes the data locally without gathering or transmitting it. ### Source excerpt An open source extension to recreate LinkedIn from your data exports ## A New Advertising API, Built From The Ground Up DevFeed: [A New Advertising API, Built From The Ground Up]() Original publisher: [Read original article]() Author: Shai Almog Published: 2026-06-08T00:00:00Z Content type: release Language: en Sources: [CodeName One]() Topics: [API](), [AdMob](), [SDKs](), [Android](), [iOS]() Tags: [admob](), [advertising](), [android](), [api](), [gdpr](), [ios](), [sdk]() ### AI overview Codename One replaces its outdated advertising mechanisms with a pluggable, format-complete advertising subsystem in the core. The new API supports modern ad formats, consent handling, event-driven callbacks, provider discovery, and a modern AdMob reference provider. ### Source excerpt A single pluggable advertising subsystem in the core replaces a stack of dead-end legacy mechanisms, covering every modern ad format with a working AdMob reference provider. ## Payment Compliance: GDPR and PSD2 Obligations for SaaS DevFeed: [Payment Compliance: GDPR and PSD2 Obligations for SaaS]() Original publisher: [Read original article]() Author: Ayush Agarwal Published: 2026-04-15T00:00:00Z Content type: tutorial Language: en Sources: [Dodo Payments Blog]() Topics: [Software as a service](), [data-processing](), [Security, Privacy and Abuse Prevention](), [Authentication](), [tokenization]() Tags: [authentication](), [compliance](), [data-processing](), [gdpr](), [merchant-of-record](), [payment](), [saas](), [tokenization]() ### AI overview A guide to GDPR and PSD2 obligations for SaaS companies handling payments for European customers. It covers personal-data handling, Strong Customer Authentication, data minimization, retention, breach notification, tokenization, and merchant-of-record arrangements. ### Source excerpt Understand how GDPR and PSD2 affect your SaaS payment flows. Covers data handling obligations, Strong Customer Authentication, and how a merchant of record simplifies compliance. ## First steps towards Codeberg DevFeed: [First steps towards Codeberg]() Original publisher: [Read original article]() Author: Thomas Künneth Published: 2025-12-31T11:43:33Z Content type: tutorial Language: en Sources: [Thomas Künneth]() Topics: [Open Source](), [hosting](), [forgejo](), [Gitea](), [GitHub](), [bitbucket](), [passwords]() Tags: [article](), [bitbucket](), [coding](), [community](), [development](), [digitalsovereignty](), [engineering](), [forgejo](), [gdpr](), [git](), [github](), [hosting](), [inclusive](), [open-source](), [opensource](), [privacy](), [software]() ### AI overview An introductory tutorial about Codeberg, a community-driven, nonprofit platform for hosting software projects. The author explains its open-source, privacy-focused model and demonstrates registering an account and beginning to migrate a GitHub repository. ### Source excerpt A lot of Europeans are currently talking about Europe having to become more independent from US-based big tech. Being a European myself, I feel the need for this, too. However, just talking won't make a difference. So, why not make this our New Year's resolution? Here's mine: I love open source. Given GitHub's recent trajectory toward centralisation, I feel there are better-suited homes for my repositories. That's why I will start migrating them to Codeberg. What is Codeberg? Codeberg is a community-driven non-profit platform for hosting software projects. Many consider it the leading independent alternative to commercial services like GitHub and Bitbucket. While it looks and feels very similar to GitHub, its underlying philosophy and legal structure are fundamentally different: unlike GitHub, which is owned by Microsoft, Codeberg is run by a German non-profit organisation called Codeberg e.V.. It is funded by donations rather than venture capital or ads. The platform runs on Forgejo, which is a community-governed fork of Gitea. Therefore, the very software used to run the site is itself open source and transparent. And it is privacy-focused. Since Codeberg is hosted in the European Union (Germany), it adheres to strict GDPR standards. It does not track users for advertising and avoids black box AI features like GitHub Copilot. Does this sound appealing? To me it certainly did. That's why I decided to jump right in. In this introductory article, I'll show you my first baby steps, that is, registering and migrating the first GitHub repository. Signing up Registering is a very quick and pleasant experience. Visit https://codeberg.org, find and click the Register button. Just enter a username, your email address, a password, and the randomly generated number or word. Once you click on Register Account, you should receive an email with the inevitable confirmation link. Click on the link to verify your email address. You will be directed to your personal Codeberg landing ## How Merchant of Record reduces your Legal & Compliance risk DevFeed: [How Merchant of Record reduces your Legal & Compliance risk]() Original publisher: [Read original article]() Author: Ishani Sahai Published: 2025-11-17T00:00:00Z Content type: article Language: en Sources: [Dodo Payments Blog]() Topics: [Software as a service](), [Security, Privacy and Abuse Prevention](), [Transactions]() Tags: [ccpa](), [chargebacks](), [compliance](), [data-privacy](), [gdpr](), [global](), [invoicing](), [legal](), [merchant-of-record](), [payments](), [regulatory](), [saas](), [tax](), [time]() ### AI overview This article explains how a Merchant of Record can reduce legal and compliance risks for SaaS companies selling globally. It covers tax remittance, invoicing, refunds, consumer-protection rules, KYC and AML checks, data privacy, chargebacks, and related regulatory obligations. ### Source excerpt Understand how a Merchant of Record lowers legal and compliance risk by handling tax remittance, invoicing, disputes, and global regulatory obligations. ## Ensuring Compliance and Governance in Kubernetes for Banking Workloads DevFeed: [Ensuring Compliance and Governance in Kubernetes for Banking Workloads]() Original publisher: [Read original article]() Author: Urolime Technologies Published: 2025-11-04T12:50:33Z Content type: article Language: en Sources: [Kubernetes Archives - Urolime Blogs]() Topics: [Kubernetes](), [Security](), [Orchestration](), [Containers](), [Cloud Native Ecosystem](), [Scalability](), [Availability]() Tags: [banking](), [cloud-native](), [compliance](), [containers](), [gdpr](), [governance](), [kubernete](), [kubernetes](), [orchestration](), [pci-dss](), [security](), [soc-2](), [zero-trust]() ### AI overview This article examines how Kubernetes can support compliance and governance for banking workloads. It describes benefits such as scalability, high availability, and fault tolerance, while identifying governance and security challenges involving complex configurations, dynamic workloads, regulatory requirements, and audit visibility. It highlights Kubernetes consulting services and zero-trust network policies as relevant practices. ### Source excerpt In the fast-paced banking era, data security and compliance is not a choice, but a necessity. Here Kubernetes has emerged as an adaptable platform to govern the containerized workloads. Its scalable, fault-tolerant application orchestration feature has proven it to be the ideal choice for the industry. In this blog we will analyze on how Kubernetes [...] ## Government cloud and AI use is criticized for bypassing required risk assessments and safeguards DevFeed: [Government cloud and AI use is criticized for bypassing required risk assessments and safeguards]() Original publisher: [Read original article]() Published: 2025-10-13T08:20:31Z Content type: opinion Language: nl Sources: [Bert Hubert's writings]() Topics: [Cloud](), [Artificial Intelligence]() Tags: [ai](), [cloud](), [gdpr]() ### AI overview This opinion article argues that the Dutch government routinely fails to follow its own rules for cloud, AI, and algorithm use. It cites findings that two-thirds of government IT projects using the cloud had no risk assessment, and discusses failed fallback tests, concerns about sensitive personal data in US clouds, and other alleged violations. ### Source excerpt Onze overheid heeft regels opgesteld voor hun gebruik van de cloud, AI en andere algoritmes. En ze houden zich er bijna nooit aan. Dit wordt keer op keer vastgesteld, zoals door de Algemene Rekenkamer, waar men constateerde dat voor twee-derde van de overheids IT-projecten "in de cloud" in het geheel geen risicoafweging was gemaakt. Dus niet dat de risicoafweging niet goed was, nee, hij was er gewoon niet. Maar wel verplicht. ## 10 reasons your CISO will love Temporal Cloud DevFeed: [10 reasons your CISO will love Temporal Cloud]() Original publisher: [Read original article]() Author: Tim Imkin Published: 2025-09-30T00:00:00Z Content type: opinion Language: en Sources: [Temporal Blog]() Topics: [Cloud](), [Security](), [Encryption](), [Firewall](), [Single sign-on (SSO)](), [Access Control](), [MFA](), [certificates](), [TLS (Transport Layer Security)](), [saml](), [ci](), [Serverless]() Tags: [access-control](), [api](), [api-keys](), [aws](), [certificates](), [ci](), [cloud](), [compliance](), [data](), [firewall](), [gdpr](), [google-cloud](), [mfa](), [network](), [permissions](), [soc](), [soc-2](), [temporal-concepts]() ### AI overview This article presents ten security and compliance characteristics of Temporal Cloud for CISO review. It describes client-side encryption with customer-controlled keys, outbound-only connectivity, mutual TLS, SAML SSO, RBAC, private connectivity options, secure debugging, and stated SOC 2, HIPAA, and GDPR support. ### Source excerpt Discover 10 reasons CISOs choose Temporal Cloud: no plaintext data, no inbound connectivity, mTLS with your CA, private links, SOC 2/HIPAA, secure debugging. ## Privacy for the newly appointed (and already exasperated) DPO DevFeed: [Privacy for the newly appointed (and already exasperated) DPO]() Original publisher: [Read original article]() Published: 2025-06-27T16:09:35Z Content type: opinion Language: en Sources: [Latacora]() Topics: [dpo](), [data](), [trust]() Tags: [compliance](), [data-protection](), [dpo](), [gdpr](), [law](), [privacy](), [trust]() ### AI overview This article offers guidance for startup employees responsible for privacy and data protection, including newly appointed Data Protection Officers. It argues that transparency, privacy by design, and data minimization help businesses maintain compliance and build customer trust, while noting the extraterritorial reach of the EU GDPR and China's PIPL. ### Source excerpt Every other week, regulators around the world bombard their constituents with new data protection laws and acronyms. As the person who was just voluntold you're now responsible for privacy at your startup, in addition to all your other duties and without any additional resources, how can you possibly be expected to keep up--let alone contextualize that information to maintain compliance? Privacy, at its core, is an ethical issue, which means the solution to your privacy challenges is deceptively simple: do the right thing and be transparent with your customers. That's it. That's what everyone means when they say "privacy by design." ## Building a Privacy-First Feedback Widget DevFeed: [Building a Privacy-First Feedback Widget]() Original publisher: [Read original article]() Published: 2025-06-13T00:00:00Z Content type: article Language: en Sources: [The Nuxt Blog]() Topics: [Nuxt.js](), [Documentation](), [Vue.js](), [Drizzle](), [Developer experience](), [User Experience](), [API](), [data](), [GitHub Issues]() Tags: [api](), [article](), [data](), [database](), [documentation](), [drizzle](), [frontend](), [gdpr](), [github-issues](), [nuxt](), [privacy](), [source](), [user-experience](), [validation](), [vue]() ### AI overview Nuxt describes the design and implementation of a privacy-first feedback widget for its documentation. The widget uses Vue 3, Motion for Vue, Drizzle, and a database-backed server workflow to collect feedback with minimal interaction, daily deduplication, and no persistent personal tracking. ### Source excerpt A lightweight, privacy-focused widget to gather your feedback on Nuxt documentation, built with Drizzle, NuxtHub database and Motion Vue. ## What is a Data Processing Agreement (DPA)? DevFeed: [What is a Data Processing Agreement (DPA)?]() Original publisher: [Read original article]() Published: 2025-03-04T22:53:17Z Content type: tutorial Language: en Sources: [Learn on Tailscale]() Topics: [data-processing](), [data]() Tags: [compliance](), [data-processing](), [data-protection](), [dpa](), [gdpr](), [legal]() ### AI overview A Data Processing Agreement (DPA) is a legally binding contract between a data controller and a data processor. It defines responsibilities for handling personal data, supports compliance with GDPR and other regulations, and is required when processing is outsourced to an external service provider. ### Source excerpt A Data Processing Agreement (DPA) defines how personal data is handled to make sure compliance is met and data protection laws are followed. ## How Data Protection Requirements Discourage Excessive Customer Data Hoarding DevFeed: [How Data Protection Requirements Discourage Excessive Customer Data Hoarding]() Original publisher: [Read original article]() Published: 2024-04-20T04:35:00Z Content type: opinion Language: en Sources: [ipSpace.net blog]() Topics: [data](), [Security]() Tags: [customer](), [data](), [data-protection](), [gdpr](), [pci-dss](), [security](), [worth-reading]() ### AI overview The article argues that data protection requirements such as PCI-DSS and GDPR primarily discourage companies from retaining excessive customer data by making data hoarding expensive, rather than directly making companies more secure. ### Source excerpt Another lovely must-read rant from the cranky security professional. TL&DR: Data protection requirements like PCI-DSS aren't there to make companies more secure but to make it too expensive for them to hoard excessive customer data (see also: GDPR). ## Ensure compliant and secure third-party access using GraphOS DevFeed: [Ensure compliant and secure third-party access using GraphOS]() Original publisher: [Read original article]() Author: Matthew Ratzke Published: 2023-03-20T09:00:00Z Content type: tutorial Language: en Sources: [Apollo Blog]() Topics: [GraphOS](), [GraphQL](), [Security](), [Authentication]() Tags: [authentication](), [ccpa](), [data-privacy](), [gdpr](), [graphos](), [graphql](), [how-to](), [jwt](), [security](), [third-party-applications]() ### AI overview This post explains how financial services companies can use Apollo GraphOS to provide compliant and secure third-party access to sensitive data. It describes schema contracts for limiting exposed fields and types, separating customer use cases, supporting data minimization, and applying access controls and authentication through Apollo Studio and Apollo Router. ### Source excerpt This post is a part of our "How to power modern financial services apps with Apollo GraphOS" series. Also in this series: - Deliver a personalized customer experience with GraphQL - Securing APIs declaratively with GraphQL - Adopt a Customer 360 approach to prevent fraud with GraphQL In recent years, GraphQL has gained popularity as a powerful alternative to REST APIs for building modern web applications. ## Introducing the Apollo Trust Center DevFeed: [Introducing the Apollo Trust Center]() Original publisher: [Read original article]() Author: Tad Whitaker Published: 2023-02-07T08:35:00Z Content type: release Language: en Sources: [Apollo Blog]() Topics: [Security](), [GraphOS](), [soc 2](), [Cloud]() Tags: [announcement](), [backups](), [customer-trust](), [download](), [gdpr](), [graphos](), [registry](), [reports](), [routing](), [security](), [security-compliance](), [soc](), [trust-center]() ### AI overview Apollo launches the Apollo Trust Center, a centralized portal for security, compliance, reliability, and legal documentation. It includes SOC 2 reports, penetration-test summaries, security questionnaires, reliability metrics, and privacy-related legal materials. ### Source excerpt Today, we're launching our new Trust Center, a single source of truth for Apollo's security, compliance, reliability, and legal documentation. Here's what you need to know. Understanding the Apollo Trust Center The Apollo Trust Center is for anyone with questions or needs concerning Apollo's compliance, security, reliability, or legal policies. ## Investigating Node.js Performance: Fastify, Express, and Memory-Heavy Log Redaction DevFeed: [Investigating Node.js Performance: Fastify, Express, and Memory-Heavy Log Redaction]() Original publisher: [Read original article]() Author: Abdelrahman Abdelhafez Human code formatter @ trivago GitHub profile Published: 2022-09-15T00:00:00Z Content type: tutorial Language: en Sources: [Trivago]() Topics: [Node.js](), [Fastify](), [Express](), [GraphQL](), [JavaScript](), [V8](), [debugging]() Tags: [backend](), [engineering](), [express](), [framework](), [gdpr](), [graphql](), [load-testing](), [node](), [node-js](), [performance](), [profiling](), [server](), [v8]() ### AI overview This technical investigation examines why migrating a monolithic Node.js GraphQL server from Express to Fastify produced no production performance improvement despite substantially faster staging load-test results. Live V8 heap profiling identified log redaction as consuming large amounts of memory. ### Source excerpt Back in March 2022, after spending a considerable amount of effort migrating our monolithic Node.js GraphQL server from ## Ditching Google Analytics for Fathom DevFeed: [Ditching Google Analytics for Fathom]() Original publisher: [Read original article]() Author: James Brooks Published: 2022-08-30T09:06:00Z Content type: opinion Language: en Sources: [Laravel Blog]() Topics: [Google Analytics](), [Livewire](), [Vapor]() Tags: [analytics](), [gdpr](), [google-analytics](), [laravel](), [privacy]() ### AI overview The Laravel team explains why it replaced Google Analytics with Fathom Analytics across its blog, Envoyer, Forge, and Vapor. The move was motivated by Fathom's simpler dashboard and privacy-law compliance, while a planned importer would preserve existing Google Analytics data. ### Source excerpt On August 24th, we switched to Fathom Analytics, completely removing our dependency on Google Analytics from this blog, Envoyer, Forge and Vapor. ## How Artsy Preserved Cookie Preferences Beyond Safari's 7-Day Limit DevFeed: [How Artsy Preserved Cookie Preferences Beyond Safari's 7-Day Limit]() Original publisher: [Read original article]() Published: 2022-08-23T00:00:00Z Content type: tutorial Language: en Sources: [Artsy]() Topics: [browser](), [WebKit](), [User experience (UX)](), [client]() Tags: [apple](), [browser](), [ccpa](), [cookies](), [gdpr](), [privacy](), [safari](), [server](), [ux](), [wwdc]() ### AI overview This article explains how Artsy addressed Safari's seven-day limit on client-side cookies, which caused cookie-consent preferences to be repeatedly requested. It describes replacing the client-side cookie with a same-domain, secure, server-side cookie so the preferences persist beyond seven days. ### Source excerpt Amongst the many, many things that organizations have to contend with around cookie consent laws is Apple's very own browser, Safari. Did you know that Safari will only retain a client-side cookie for 7 days? This is in support of Apple's Intelligent Tracking Prevention (ITP) feature, designed to protect a user's privacy. These privacy efforts are great but, in hand with laws like GDPR and CCPA, their rollout often creates a UX nightmare for users without some extra care. Here at Artsy, we've landed on a way to make things slightly less bad and want to share our approach. Scenario: Imagine that as a EU resident you visit artsy.net for the first time. A banner appears asking you to Accept or Deny tracking cookies from our site. You don't like tracking cookies, so you click the "Deny" button and the banner disappears. All good, right? Nope! You visit Artsy a week later and again, a banner appears asking you to choose your preferences. This happens again and again until you switch browsers and realize that what you were experiencing was Apple's ITP feature in action. After choosing your preferences, the cookie we use to store them is erased after 7 days, necessitating another interaction. We thrashed around in this vicious cycle for months until we found a simple, elegant solution thanks to a WebKit engineer's prompt (during Apple's open lab calls at WWDC - which you too can schedule!) She mentioned that the 7-day cookie limitation only applies to client-side cookies and that same-domain, secure, server-side cookies are not limited to these constraints. This got us thinking. Our third-party cookie consent management service sets a client-side cookie, not a server-side cookie. Could we perhaps overwrite the client-side cookie with a server-side cookie of the same name and trick Safari into persisting the user preferences beyond the 7-day limit? We gave it a try and... Yes. We. Can! And this means that you can too (and it's also real easy to implement). First, define an AP ## Stuff The Internet Says On Scalability For July 11th, 2022 DevFeed: [Stuff The Internet Says On Scalability For July 11th, 2022]() Original publisher: [Read original article]() Author: HighScalability Team Published: 2022-07-11T16:11:55Z Content type: article Language: en Sources: [High Scalability](), [High Scalability]() Topics: [Scalability](), [Internet](), [Architecture & Design]() Tags: [attacks](), [cloud](), [cloudflare](), [concurrent](), [data](), [gdpr](), [go](), [hot-links](), [kafka](), [kubernetes](), [latency](), [on-prem](), [performance](), [scalability](), [servers](), [stack-overflow]() ### AI overview A July 11, 2022 HighScalability roundup collects assorted internet items about scalability, including infrastructure figures, Kubernetes and Cloudflare examples, Stack Overflow and Riot Games workloads, Go generics performance, processor design, concurrent connections, Wi-Fi security, and GDPR fines. ### Source excerpt Never fear, HighScalability is here! Every cell a universe. Most detailed image of a human cell to date. @microscopicture Other images considered: one byte of RAM in 1946; visual guide on troubleshooting Kubernetes; Cloudflare using lava lamps to generate cryptographic keys; 5MB of data looked like in 1966 My Stuff: Love this Stuff? I need your support on Patreon to help keep this stuff going. Know anyone who needs to go from zero to cloud? My book teaches them all they need to know about the cloud. Explain the Cloud Like I'm 10. It has 440 mostly 5 star reviews on Amazon. Here's a 100% sincere, heartfelt review: Do you like Zone 2, Zone 5, interval, REHIT, HIIT, and bodyweight workouts? I made an app for that. Max Workout. I'm not just the programmer, I'm a client. I use it 4 times a week and if you want to retrain your mitochondria, get fit, get healthy, and live longer, I think you'll like it too. Number Stuff: ## The Fundamentals Of Data Gravity With Dave McCrory DevFeed: [The Fundamentals Of Data Gravity With Dave McCrory]() Original publisher: [Read original article]() Author: ionir Team Published: 2022-03-30T14:24:37Z Content type: article Language: en Sources: [ionir]() Topics: [data](), [Latency](), [Cloud]() Tags: [centralization](), [cloud-computing](), [data](), [data-analytics](), [data-gravity](), [data-science](), [fundamentals](), [gdpr](), [latency](), [podcast]() ### AI overview A podcast discussion with Dave McCrory explains data gravity: the tendency of data to attract applications, services, and other data. The episode covers how data access, latency, bandwidth, data volume, and activity influence this effect and how the concept has evolved. ### Source excerpt Data gravity is the ability of data to attract applications, services, and other data to it. Dave McCrory coined the term in 2010 to describe this trait of data and its impact on businesses. In this episode, Tad Lebeck and... The post The Fundamentals Of Data Gravity With Dave McCrory appeared first on ionir. ## Demystifying European Digital Sovereignty DevFeed: [Demystifying European Digital Sovereignty]() Original publisher: [Read original article]() Published: 2021-07-13T19:15:30Z Content type: opinion Language: en Sources: [Bert Hubert's writings]() Topics: [digital sovereignty](), [scaleway](), [data]() Tags: [article](), [data](), [digital-autonomy](), [digital-sovereignty](), [europe](), [gdpr](), [innovation](), [law](), [panel](), [sas](), [scaleway]() ### AI overview The article reflects on a panel about European digital sovereignty. It argues that Europe's reliance on foreign platforms for digital communication services raises concerns about data access, legal protection, and future dependence, and discusses regulation and stronger European digital services as possible responses. ### Source excerpt This article is part of a series on (European) innovation and capabilities. Recently I participated in a very useful panel that aimed to demystify European digital sovereignty. Even though we spoke for more than an hour (video), we obviously were not able to fix all of Europe's sovereignty problems! The event was organized by Scaleway (previously Online SAS or Online.net), a 100% subsidiary of what I think is Europe's most innovative telecommunications company, Iliad. [Next page]()