Abstract

For marketers, the shift to a cookieless, privacy-first digital world is a significant challenge: how to meet consumer expectations for privacy while ensuring the ability to personalize for marketing performance. The article explores the "Privacy-Personalization Paradox," discussing how regulatory policies like GDPR and CCPA are interrelated, how consumer perceptions of data use are evolving, and how third-party cookies are impacting the landscape. The paper examines the implications of this shifting landscape, drawing on insights from marketing, data ethics, and digital strategy, and proposes strategies for how organisations can adjust to the new world of non-trackable data. It examines new methodologies such as the gathering of first-party data, contextual targeting, AI-powered predictive profiling, and privacy-safe technologies, and how they may enable personalisation and compliance. The focus is on the strategic relevance of trust, with transparency and consent as key elements for customer loyalty and sustainable value creation. The conclusions of the article are that privacy requirements are not something to be avoided but an opportunity to innovate and to make privacy first practices a way to gain a new competitive edge in the future.

References

• Goldfarb, Avi, and Catherine E. Tucker. 2011. "Privacy Regulation and Online Advertising." Management Science 57, no. 1 (January): 57–71. doi:10.1287/mnsc.1100.1246.
• Dinev, Tamara, and Paul Hart. 2006. "An Extended Privacy Calculus Model for E-Commerce Transactions." Information Systems Research 17, no. 1 (March): 61–80. doi:10.1287/isre.1060.0080.
• Acquisti, Alessandro, Laura Brandimarte, and George Loewenstein. 2015. "Privacy and Human Behavior in the Age of Information." Science 347, no. 6221 (January): 509–14. doi:10.1126/science.aaa1465.
• Norberg, Patricia A., Daniel R. Horne, and David A. Horne. 2007. "The Privacy Paradox: Personal Information Disclosure Intentions versus Behaviors." Journal of Consumer Affairs 41, no. 1 (June): 100–126. doi:10.1111/j.1745-6606.2006.00070.x.
• Smith, H. Jeff, Sandra J. Milberg, and Sandra J. Burke. 1996. "Information Privacy: Measuring Individuals’ Concerns About Organizational Practices." MIS Quarterly 20, no. 2 (June): 167–96. doi:10.2307/249477.
• Bleier, Alexander, and Maik Eisenbeiss. 2015. "Personalized Online Advertising Effectiveness: The Interplay of What, When, and Where." Marketing Science 34, no. 5 (September): 669–88. doi:10.1287/mksc.2015.0930.
• Skiera, Bernd, et al. 2022. The Impact of the General Data Protection Regulation (GDPR) on the Online Advertising Market. Vol. 11. https://gdpr-impact-book.github.io/gdpr_impact/.
• Aridor, Guy, Yeon-Koo Che, and Tobias Salz. 2020. "The Effect of Privacy Regulation on the Data Industry: Empirical Evidence from GDPR." NBER Working Paper No. 26900. Cambridge, MA. doi:10.3386/w26900.
• Goldberg, Samuel G., Garrett A. Johnson, and Scott K. Shriver. 2024. "Regulating Privacy Online: An Economic Evaluation of the GDPR." American Economic Journal: Economic Policy 16, no. 1 (February): 325–58. doi:10.1257/pol.20210309.
• Miller, Klaus M., K. Lukic, and Bernd Skiera. 2026. "The Impact of the General Data Protection Regulation (GDPR) on Online Tracking." International Journal of Research in Marketing 43, no. 1 (March): 48–70. doi:10.1016/j.ijresmar.2025.03.002.
• Kristol, David M. 2001. "HTTP Cookies: Standards, Privacy, and Politics." ACM Transactions on Internet Technology 1, no. 2 (November): 151–98. doi:10.1145/502152.502153.
• Englehardt, Steven, and Arvind Narayanan. 2016. "Online Tracking: A 1-Million-Site Measurement and Analysis." In Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 1388–1401. New York: ACM. doi:10.1145/2976749.2978313.
• Mayer, Jonathan R., and John C. Mitchell. 2012. "Third-Party Web Tracking: Policy and Technology." In 2012 IEEE Symposium on Security and Privacy, 413–27. IEEE. doi:10.1109/SP.2012.47.
• Papadopoulos, Panagiotis, Nick Kourtellis, and Evangelos P. Markatos. 2018. "Exclusive." In Proceedings of the 11th European Workshop on Systems Security, 1–6. New York: ACM. doi:10.1145/3193111.3193117.
• Choi, H., C. F. Mela, S. R. Balseiro, and A. Leary. 2020. "Online Display Advertising Markets: A Literature Review and Future Directions." Information Systems Research 31, no. 2 (June): 556–75. doi:10.1287/isre.2019.0902.
• Hwang, Tim. 2020. Subprime Attention Crisis: Advertising and the Time Bomb at the Heart of the Internet. Farrar, Straus and Giroux.
• Veale, Michael, and Frederik Zuiderveen Borgesius. 2025. "Adtech and Real-Time Bidding under European Data Protection Law." German Law Journal. doi:10.1017/glj.2022.18.
• Turow, Joseph, and Michael Hennessy. 2015. "The Tradeoff Fallacy: How Marketers are Misrepresenting American Consumers and Opening Them Up to Exploitation." SSRN Electronic Journal. doi:10.2139/ssrn.2820060.
• Voigt, Paul, and Axel von dem Bussche. 2017. The EU General Data Protection Regulation (GDPR): A Practical Guide. Springer International Publishing.
• Tikkinen-Piri, Crista, Anna Rohunen, and Jouni Markkula. 2018. "EU General Data Protection Regulation: Changes and Implications for Personal Data Collecting Companies." Computer Law & Security Review 34, no. 1 (February): 134–53. doi:10.1016/j.clsr.2017.05.015.
• Goldman, Eric. 2021. "An Introduction to California’s Consumer Privacy Laws (CCPA and CPRA)." SSRN Electronic Journal. doi:10.2139/ssrn.3896176.
• Kollnig, Konrad, et al. 2022. "Are iPhones Really Better for Privacy? A Comparative Study of iOS and Android Apps." Proceedings on Privacy Enhancing Technologies 2022, no. 2 (April): 6–24. doi:10.2478/popets-2022-0033.
• Campbell, James, Avi Goldfarb, and Catherine Tucker. 2015. "Privacy Regulation and Market Structure." Journal of Economics & Management Strategy 24, no. 1 (March): 47–73. doi:10.1111/jems.12079.
• Borgesius, Frederik J. Zuiderveen, et al. 2017. "Tracking Walls, Take-It-Or-Leave-It Choices, the GDPR, and the ePrivacy Regulation." European Data Protection Law Review 3, no. 3: 353–68. doi:10.21552/edpl/2017/3/9.
• Competition and Markets Authority (CMA). 2026. "Investigation into Google’s ‘Privacy Sandbox’ Browser Changes." GOV.UK. Accessed June 11, 2026. https://www.gov.uk/cma-cases/investigation-into-googles-privacy-sandbox-browser-changes.
• Geradin, Damien, Theodosia Karanikioti, and Dimitrios Katsifis. 2021. "GDPR Myopia: How a Well-Intended Regulation Ended Up Favouring Large Online Platforms - The Case of Ad Tech." European Competition Journal 17, no. 1 (January): 47–92. doi:10.1080/17441056.2020.1848059.
• Danaher, Peter J., and Teresa S. Dagger. 2013. "Comparing the Relative Effectiveness of Advertising Channels: A Case Study of a Multimedia Blitz Campaign." Journal of Marketing Research 50, no. 4 (August): 517–34. doi:10.1509/jmr.12.0241.
• Wang, Peng, Liang Jiang, and Jing Yang. 2024. "The Early Impact of GDPR Compliance on Display Advertising: The Case of an Ad Publisher." Journal of Marketing Research 61, no. 1 (February): 70–91. doi:10.1177/00222437231171848.
• Davenport, Thomas H., and Jeanne G. Harris. 2007. Competing on Analytics: The New Science of Winning. Harvard Business School Press.
• Machuletz, Dominik, and Rainer Böhme. 2020. "Multiple Purposes, Multiple Problems: A User Study of Consent Dialogs after GDPR." Proceedings on Privacy Enhancing Technologies 2020, no. 2 (April): 481–98. doi:10.2478/popets-2020-0037.
• Vaswani, Ashish, et al. 2017. "Attention is all you need." In Proceedings of the 31st International Conference on Neural Information Processing Systems, 6000–6010. Red Hook, NY: Curran Associates Inc.
• Dwork, Cynthia. 2006. "Differential Privacy." In Automata, Languages and Programming, edited by M. Bugliesi, et al., 1–12. Springer. doi:10.1007/11787006_1.
• Zheng, W., Q. Zhao, and H. Xie. 2024. "Research on Adaptive Noise Mechanism for Differential Privacy Optimization in Federated Learning." Journal of Knowledge Learning Science and Technology 3, no. 4 (December): 383–92. doi:10.60087/jklst.v3.n4.p383.
• McMahan, H. Brendan, et al. 2017. "Communication-Efficient Learning of Deep Networks from Decentralized Data." In Proceedings of the 20th International Conference on Artificial Intelligence and Statistics, 10. https://proceedings.mlr.press/v54/mcmahan17a/mcmahan17a.pdf.
• Konečný, Jakub, et al. 2017. "Federated Learning: Strategies for Improving Communication Efficiency." arXiv:1610.05492.
• Gupta, N. 2025. "Secure Data Collaboration: Inside the Architecture of Modern Advertising Clean Rooms." In 2025 6th Technology Innovation Management and Engineering Science International Conference (TIMES-iCON), 1–5. IEEE. doi:10.1109/TIMES-iCON67125.2025.11488099.
• Zhou, I., et al. 2024. "Secure Multi-Party Computation for Machine Learning: A Survey." IEEE Access 12: 53881–99. doi:10.1109/ACCESS.2024.3388992.
• Aguirre, Eduardo, et al. 2015. "Unraveling the Personalization Paradox: The Effect of Information Collection and Trust-Building Strategies on Online Advertisement Effectiveness." Journal of Retailing 91, no. 1 (March): 34–49. doi:10.1016/j.jretai.2014.09.005.
• Bounie, David, Abel Dubus, and Patrick Waelbroeck. 2021. "Selling Strategic Information in Digital Competitive Markets." The RAND Journal of Economics 52, no. 2 (June): 283–313. doi:10.1111/1756-2171.12369.
• Cavoukian, Ann. 2011. "Privacy by Design: The 7 Foundational Principles." Information and Privacy Commissioner of Ontario.
• Lwin, May, Jochen Wirtz, and Jerome D. Williams. 2007. "Consumer Online Privacy Concerns and Responses: A Power–Responsibility Equilibrium Perspective." Journal of the Academy of Marketing Science 35, no. 4 (November): 572–85. doi:10.1007/s11747-006-0003-3.
• Grover, Varun, et al. 2018. "Creating Strategic Business Value from Big Data Analytics: A Research Framework." Journal of Management Information Systems 35, no. 2 (April): 388–423. doi:10.1080/07421222.2018.1451951.
• Subramanian, G., et al. 2024. "Driving Cross-Functional Collaboration through Data Governance." 12, no. 12: 3552–71.
• Preukschat, Drummond, and Daniel Reed. 2021. Self-Sovereign Identity: Decentralized Digital Identity and Verifiable Credentials. Manning.
• Bradford, Anu. 2020. The Brussels Effect: How the European Union Rules the World. Oxford University Press.
• Solove, Daniel J. 2013. "Introduction: Privacy Self-Management and the Consent Dilemma." Harvard Law Review 126, no. 7: 1880–1903.
• Pieters, Rik, and Michel Wedel. 2004. "Attention Capture and Transfer in Advertising: Brand, Pictorial, and Text-Size Effects." Journal of Marketing 68, no. 2 (April): 36–50. doi:10.1509/jmkg.68.2.36.27794.
• Gal, Michal S., and Niva Elkin-Koren. 2017. "Algorithmic Consumers." Harvard Journal of Law & Technology 30, no. 2.
• Weinmann, Markus, Christoph Schneider, and Jan vom Brocke. 2016. "Digital Nudging." Business & Information Systems Engineering 58, no. 6 (December): 433–36. doi:10.1007/s12599-016-0453-1.