The public now has a general understanding of cookies and the right to opt out, and organizations have adapted to increased regulatory scrutiny around cookies. In recent years, a significant decline in user tracking information received has led organizations to explore tracking solutions other than cookies. Many organizations are phasing out the use of cookies and opting for new digital marketing strategies.

The EU Data Act, effective September 12, 2025, is a regulation aiming to make more data available for use while establishing parameters around who can use and access what data and for which purposes. The intent is to foster innovation, expand competition, and create a more equitable economy within the EU.

Thank you for following our four-part series on Shadow AI.

Welcome to Part 3 of our series on Shadow AI. In the first installment, we defined Shadow AI and the risks that the unauthorized use of artificial intelligence tools present.

When employees use Shadow AI—that is, unauthorized, unvetted tools that the company is not overseeing or even aware of—it introduces risks, including around privacy and cybersecurity compliance. These risks rarely occur in isolation.