Legal · SMB · Emerging
Confusion regarding compliance with overlapping EU privacy laws (ePrivacy and GDPR) leading to uncertainty in user consent requirements for data storage and tra
Businesses struggle to navigate the complexities of ePrivacy and GDPR regulations, particularly concerning user consent for data processing and the use of cookies.
Who experiences it: SMB
Momentum
0%
Pain
75
Competition
90
Opportunity
60/100
Signals over time
2 observed signals across 1 sources, tracked for 2 days. Confidence: low.
What people are saying Observed
“I don’t understand why that’s considered legal under GDPR. How can consent be express and informed when it would take 30 minutes just to identify each entity your data is being shared with? In fact the law even specifies “no pre-ticked boxes” but every banner always has “accept all”. And it’s 50/50 to see “reject all” even though it is a requirement that denying must be as easy as accepting. They should pay a bounty for reporting non-compliance.”
Hacker News · frustration
“The EU/banner situation keeps confusing people because there are two different laws in play: 1) ePrivacy. the OG banner law. requires you to inform the user (but not consent, as I understand it) if you store data on a user's device. includes cookies, localStorage, indexedDB, etc. does not affect fingerprinting 2) gdpr. requires you to ask consent for any kind of user data processing, unless you can find another legal basis eprivacy was about cookies, but forgot fingerprinting. gdpr was not specifically about cookies. but gdpr (or at least its past interpretation by the dutch privacy authority) didn't require consent for limited first party analytics. which led to situations where you'd get the impression that you wouldn't need a banner for first party tracking using cookies .. well the gdpr didn't require it, but the older ePrivacy rules still did. we still have the digital omnibus law package coming up which is supposed to simplify and resolve the overlap between the two above, and reduce banner requirements at least for SMB just analyzing their website visitors”
Hacker News · frustration
Why now? AI inference
Existing solutions Observed
- Civic · Explore $49/mo · Bootstrap $199/mo · complaints: Limited customization options, Some features are not as robust as competitors, Occasional bugs in the software
- Iubenda · Essentials €4,99 · Advanced €19,99 · Ultimate €79,99 · complaints: Limited features in the free tier, Can be expensive for advanced features, Some users report issues with updates
- OneTrust · Unknown · complaints: High pricing for smaller businesses, Complex setup process, Occasional performance issues
- Cookiebot · Cookiebot Core Start Free · 14-day free trial Free · complaints: Limited features in the free tier, Occasional false positives in cookie scanning, Customer support can be slow
- TrustArc · Unknown · complaints: Pricing can be opaque, Steep learning curve for new users, Integration challenges with some platforms
There is a significant opportunity for a compliance solution tailored specifically for small and medium-sized businesses (SMBs) that simplifies the complexities of overlapping EU privacy laws, particularly ePrivacy and GDPR. Current competitors, while offering various strengths, often face complaints regarding high pricing, complex setups, and limited features in their free tiers, indicating a demand for a more affordable, user-friendly, and comprehensive compliance tool designed for SMBs.
See the full evidence, competitor gap matrix and opportunity report.
Free account. No credit card.