Privacy Horror Stories: The Tags That Came Back From the Dead

Posted

October 16, 2026

Privacy

Blogs

Writen by:

Christine Desrosiers, CIPP/E, CIPP/US, CIPM, FIP

In privacy, removing a tag and it actually being gone are not always the same thing. A team can fix a consent rule, retire a vendor, or clean up its tag manager and reasonably assume the work is done. But there's always a risk that the next update can undo that fix, or another script can bring a tracker back in. And ending a vendor relationship doesn't necessarily stop its tag from firing.

These are the tags that outlive the decisions meant to stop them. Some never left; others found a way back. Here are three kinds of undead tags we've run into:

‍‍

The one you already fixed.

Remember the rewards site with two consent banners I mentioned last week? The team had set up a rule to suppress a dormant tag, then a routine update to their consent platform inadvertently dropped it. And nobody knew to turn the rule back on.

‍

The one that hitched a ride.

On an education site, a social media pixel fired after opt-out on every page we scanned. Nobody had added it directly: a third-party script loaded a tag manager, which then loaded the pixel. On the same site, an approved affiliate script loaded a likely adware domain. And the moment a new script went live, a new AI vendor’s tag appeared.

‍

The one whose vendor is gone.

We tested the opt-out configuration of an environmental services company and found 127 of 156 tags still firing. One belonged to a vendor they had trialed and had stopped working with. The relationship ended, but the tag didn't.

Why do they keep coming back?

Tag managers marked "essential" become a back door for everything inside them.
Fixes live in configuration, and configuration gets overwritten by the next CMP update, redesign, or deploy.
Vendors load other vendors. Approving one script can mean approving whatever it calls.

None of this shows up in a vendor inventory or a CMP dashboard. You only see it by watching what the browser actually does, after every change, every time.

So I'll ask: when did your team last find something in production it didn't know was there, or thought it had already removed?

‍

Privacy Horror Stories: The Tags That Came Back From the Dead

Why website tracking tags persist after removal or opt-out—and how consent platform updates, third-party scripts, and former vendors leave unexpected trackers in production.

Privacy Horror Stories: What I've Seen Go Wrong Behind the Scenes

A configured consent platform doesn’t guarantee a working opt-out. Three real-world stories expose the gap between privacy policies and browser behavior.

AI Is Accelerating Digital Change. What Does That Mean for Your Privacy Posture?

AI is helping development and marketing teams move faster, but every new release, campaign and technology integration creates another opportunity for privacy controls to behave differently in production. As digital environments become more dynamic, privacy teams need to move beyond configuration and continuously verify that consumer choices are actually being respected.

The Governance Layer Agentic Advertising Is Missing

As agentic advertising gives autonomous systems more authority over buying, selling, and campaign execution, governance must move beyond policy definition to independent verification. Boltive’s Agentic Governance Engine is designed to validate the properties, creatives, signals, and transactions these systems rely on, providing trusted evidence that autonomous advertising activity operates within established policies.

Following the Data: Why Privacy Verification Needs to Go Beyond the Page

Scanning shows a snapshot. See how data, tags, and consent signals behave in real time within the browser session, and where compliance actually breaks.

Privacy Isn't a Compliance Checkbox - It's a Revenue Protection Strategy

Privacy does not fail at policy. It fails in production. Consent signals break, data flows where it should not, and your campaigns run on compromised inputs. This is not just compliance risk. It is revenue risk hiding in your ad supply chain.

$3.4 Billion in Privacy Fines: The Enforcement Era Is Here.

$3.4B in 2025 privacy fines signals a shift from policy to enforcement. Regulators are targeting real UX failures, not paperwork. If consent flows break in production, you’re exposed. Compliance now requires continuous validation, not one-time setup.

The Quiet Part of COPPA Just Got Louder

COPPA’s updated rule hits its main compliance deadline April 22. The changes go beyond policy, raising the bar on how children’s data is shared, retained, and secured, and forcing teams to prove how systems behave in practice.

CIPA Litigation Is Evolving. Is Your Privacy Program Keeping Up?

CIPA litigation is expanding beyond pixels to the full ad ecosystem. Learn how CMP misconfigurations, data sharing, and downstream partners create risk, and what steps teams can take to reduce exposure with stronger governance and independent verification.

Compliance Keeps Failing After Deployment. Here's Why That's an Ad Tech Problem.

Privacy compliance failures are an ad tech problem at scale. Even when CMPs are configured correctly, consent signals break across tags, partners, and bidstream flows. Regulators now expect proof of real user outcomes across thousands of domains, not just policy or setup.

Compliance Belongs at the Top: Why We Just Expanded Our C-Suite

Boltive is expanding its executive team to meet rising enterprise demand for real-time privacy compliance and ad security. As regulatory pressure and programmatic complexity grow, the company is scaling Privacy Guard, advancing CTV infrastructure, and accelerating innovation.

Five Takeaways from Marketecture Live: The Ad Industry’s AI Reckoning Is Here

Five takeaways from Marketecture Live: the ad industry’s AI reckoning is underway. From CTV supply chain risks and residential proxy botnets to LLM advertising and agentic campaign ops, trust, verification, and infrastructure integrity are becoming critical.

Privacy Doesn't Care How You Bought the Impression

CTV advertising now runs through two parallel systems: programmatic marketplaces and automated direct sales. Each introduces different privacy risks, and regulators do not distinguish between them. Compliance increasingly depends on verifying how data actually flows across both.

Agentic Privacy Compliance: Accountability in an Evolving World

Celebrating Data Privacy Day with a great discussion on how agentic development impacts privacy compliance.

The Governance That Failed Us: Why Digital Compliance Must Shift from Intent to Behavior

Digital compliance is breaking because it was built to verify intent, not behavior. As programmatic systems and generative AI execute autonomously and evolve after deployment, static audits and configuration checks fail to catch real risk. This post argues for a necessary shift t

New State Privacy Laws Hit in Q1. Here Is What You Need to Know Before 2026

Q1 brings new privacy enforcement in Kentucky, Rhode Island, and Indiana with stricter consent and data sharing rules. More updates hit in 2026 across CT, CO, and CA. Teams need stronger validation to avoid silent failures and rising enforcement risk.

When Opt-Out Isn’t Enough: Lessons from Google’s $425 Million Privacy Fine

Google’s $425M penalty shows a hard truth: opt-out controls are meaningless without proof they work. As systems grow more complex, silent failures are inevitable. Brands now need continuous, real-world verification to ensure user choices are actually honored.

The Cost of Complacency: What the LinkedIn Privacy Lawsuit Means for Every Digital Brand

The LinkedIn class action highlights a growing truth: privacy failures now happen in code, not policy. Hidden tags, SDKs, and pixels can share data after opt out. Companies need evidence-based monitoring that proves what actually happens in the browser.

Avoiding the Next Headline: What Privacy and Security Teams Need to Know Heading Into 2026

Privacy and adtech risks are rising, and automation alone cannot keep pace. At the Privacy and Security Forum, Boltive showed how consent signals, tags and ads fail in real environments, and how simulated user testing helps teams catch issues early.

Prebid.js Impacted in Major NPM Supply Chain Attack: What Ad Tech Needs to Know

Discover how a major security breach in the JavaScript ecosystem compromised over 20 popular npm packages, including Prebid.js. Learn why this supply chain attack is a critical threat to ad tech and what immediate steps you can take to protect your ad stack and users.

Boltive Builds for the Future, Welcoming Pamela Slea as Company President

Industry veteran brings two decades of AdTech experience to the digital compliance leader

8 Ways Automation Can Help Privacy Teams Beat Burnout

Automation can help privacy teams reduce burnout by minimizing repetitive tasks, improving compliance accuracy, and enabling more strategic, sustainable work.

The Big Shifts Shaping the Future of Ad Tech: 3 Key Takeaways from the 2025 NAI Summit

The 25th NAI Summit spotlighted three major trends redefining data governance in ad tech: national security, state collaboration, and ecosystem complexity.

AI Adoption, Evolving Enforcement & the Convergence of Privacy & Security: 6 Big Takeaways from the 2025 PSF Spring Academy

From AI governance and cookie compliance to state-level enforcement and tech-savvy legal teams—discover the 6 key trends shaping privacy and security from the 2025 PSF Spring Academy.

Regulators are Getting Serious about Manipulative Patterns. So Should You.

At IAPP GPS 2025, regulators made it clear: manipulative patterns like deceptive consent designs are under fire. Learn what they are, what global enforcers found, and how to fix them before enforcement finds you.

Three Takeaways from the 2025 IAPP Global Privacy Summit

Fresh from the 2025 IAPP Global Privacy Summit, the Boltive team shares three pivotal insights shaping the future of privacy, compliance and digital trust.

Boltive Leads the Way with New Digital Compliance Software Suite

New platform streamlines and unifies popular legacy products in privacy and ad security, adding support for mobile apps and redefining digital compliance for an evolving marke

Inside the California Law Association Privacy Summit: What Regulators Are Really Watching

Discover key insights from the CLA Privacy Summit on what regulators want businesses to know about evolving privacy laws, compliance expectations, and best practices

Privacy Compliance Teams are Swamped… But Help Is On the Way.

How do businesses handle more consumer demand for proactive control over their personal information when regulatory bodies are giving them what they want?

Digital Privacy Rules are Still a Mess, But the Future of Compliance is Here

With U.S. privacy laws in flux, Boltive's Privacy Guard simplifies compliance and empowers consumers with control over their data.

Boltive Launches New Product Ad Monitor: Revolutionizing Ad Insights with AI-Powered Discovery Engine

Empowering Brands and Publishers with Advanced AI Technology for Real-Time Ad Compliance and Enhanced Security

Case Study Expanding Ad Security to Mobile Apps

Learn how BuzzFeed expanded their partnership with Boltive to protect consumers on their mobile app.

Navigating Digital Security: Boltive's Q1 2024 Risk Report

Review the latest ad security data gathered by Boltive's Ad Lightning product.

Celebrating Boltive Milestones

From ad security to data privacy, discover all of the major milestones Boltive has achieved over the years.

IAPP GPS - Our Thoughts, Part 2: What Regulators Want Us To Do – The Value of Proactivity

Catch up on Part 2 of Christine Desrosiers’s thoughts from IAPP GPS as she dives into What Regulators Want Us To Do.

IAPP GPS - Our Thoughts, Part 1: What Regulators Want Us To Know – Busting Common Myths

Follow along as Boltive team member, Christine Desrosiers, shares her notes from the IAPP Global Privacy Risk Summit.

Decoding the Art of Deception: Insights from Our Boltive AI Engine

In this blog post, we’ll delve into the world of deceptive non-compliant ads discussing how our Boltive AI Engine is helping combat this problem.

Get Your Time Back - How AI Solves your "Unknown" Tag & Cookie Problem

Discover how the Boltive Object Identification Engine revolutionizes the way we manage tags and cookies, making manual searches a thing of the past.

CG Infinity and Boltive Forge a Partnership to Enhance Data Protection

Boltive and CG Infinity have partnered to provide a data privacy solution in a time where privacy regulations are beginning to really ramp up.

On-demand Webinar - Demystifying Digital Privacy

Discover the secrets behind cookies, pixels, and tags and gain a deeper understanding of these tools and how they affect your data privacy practices.

Prioritizing Children's Privacy: Strategies for Ethical Advertising and the Use of AI

As children and teens become more exposed to the dangers of social media and online advertising, regulators are stepping in to help protect them.

Ad Security Reimagined: Exploring Boltive's Artificial Intelligence Techniques

Explore Boltive’s use of artificial intelligence in the world of ad security and the ability to quickly identify and mitigate unwanted content.

Case Study - Defensive Against Offensive Ads

Read how Sovrn Holdings leveraged Ad Lightning capabilities to defend against offensive ads.

How Best-in-Class Companies Are Preparing for 2024’s State Privacy Regulations

With new state regulations around consumer data collection going into effect in 2024, top companies are taking action to ensure they are staying compliant.

Companies Continue to Share Health Data Despite New Privacy Laws

Are health websites sharing personal or sensitive data? Read this report from Boltive and Consumer Reports on our findings.

Your Privacy, Our Priority: Boltive Privacy Guard Supports TCF v2.2 and GPP

With the TCF v2.2 being released in November 2023 and an updated GPP coming in January 2024, are you prepared to be compliant with these new releases.

Business Ninjas Podcast - Secure Protection for Advertisers Against Invasive Media

Boltive CEO Dan Frechtling joins Kelsey McDonald on the WriteForMe podcast "Business Ninjas" to discuss data privacy.

Automating Threat Detection: How Boltive is Harnessing Artificial Intelligence to Reshape Ad Security

The Boltive team is leveraging the use of Artificial Intelligence to enhance the way publishers identify and mitigate threats.

The Current State of Ad Security

Ad Security threats come in many forms - are you prepared to identify and address them?

Staying Compliant in an Evolving Data Privacy World

With new regulations recently released and more coming, are your privacy programs and technologies ready?

Dan Frechtling on More Than a Refresh Presents: Digital Privacy

In this More Than a Refresh episode the panel takes a deep dive into Digital Privacy. Join along as the group further explore data privacy regulations and how to best combat non-compliance.

Dan Frechtling on Inuizi's The Data Deep Dive

Boltive CEO Dan Frechtling joins Intuizi's Ron Donaire on The Data Deep Dive to discuss Boltive and how it fits into the Privacy world.

Forbes Article - The Privacy Prescription: Rules Restricting Health Data Use And How To Employ More Holistic Security Measures

Though there are laws in place to protect health data, there are many compliance loopholes when it comes to data sharing.

Forbes Article - Will The U.S. Update Laws For Children's Digital Privacy?

Though there are laws addressing Children's Data Privacy, there is much room for improvement to protect them.

Dan on The Cyber Pro Podcast ep. 236

Dan talks about his journey from marketing to data privacy. He is on a mission to protect consumers from invasive media. He shares his personal story about being tracked online and how the hyper targeting he was victim of started him on his journey to Boltive.

Dan Frechtling on That Tech Pod — "Why Aren't There Privacy Riots?

Today on That Tech Pod, Laura and Kevin speak with CCPA & CPRA Co-author Rich Arney and Boltive CEO Dan Frechtling.

3 Strategies to Improve Ad Revenue for Publishers

Given the uncertain macroeconomic climate, the outlook for digital ad spending is spotty at best. Over the last year we have seen that large advertisers are pulling back budgets, and it’s looking like that will only continue this year.

Forbes Article - How Privacy Got On The Calendar

Technology Council Member and Boltive CEO, Dan Frechtling dives into the evolution of data privacy.

Boltive CEO Dan Frechtling Joins Forbes Technology Council

Our CEO Boltive, Dan Frechtling, has been accepted into Forbes Technology Council, an invitation-only community for world-class CEOs, CIOs, CTOs, and other technology executives

Geekwire wrote about the heartening link that brought our CEO and CFO to Boltive.

Boltive featured in Consumer Reports

Boltive's Privacy Guard was recently featured in Consumer Reports

Why Data Privacy is Being Overhauled in 2023: Dan Frechtling featured on the Security Weekly Productions podcast

Get the scoop about why Sephora was recently fined, and why data privacy is being overhauled in 2023

Whitepaper: Digital Advertising Unboxed

Christine Desrosiers, our Director of Product, shares an insightful and informative whitepaper on the current state of privacy compliance.

Why Having a Consent Management Platform is Not Enough

Assuming CMPs are infallible could be detrimental to your data privacy efforts, resulting in broken relationships with your consumers, damaged business reputations, and hefty fines.

Our CEO, Dan Frechtling, featured on Leadership Live podcast with Daphna Horowitz

Don’t miss this episode of Leadership Live where Dan Frechtling discusses loss, leadership, and data privacy – what every CEO needs to think about.

Bracing for 2023 Privacy Laws: Most Businesses Aren’t Ready to Comply

Advertisers and brands are liable for any unauthorized data sharing in their digital advertising campaigns. Comply with regulations and protect your reputation.

California Privacy Compliance Has Irreversibly Changed

Wednesday, August 24 marked the end of the quiet period for enforcement of the California Consumer Privacy Act (CCPA).

Case Study: Boltive Privacy Guard Eliminates Data Leakage for a Fortune 500 Brand

Our Privacy Guard solution proves to be a success by identifying critical problems for Fortune 500 brands.

What Is A Consent String Failure

Having a Consent Management Platform (CMP) does not let you off the hook if your partners accidently (or intentionally) expose your customers’ data. You need to ensure information sharing consent is given in 4 key areas or you risk brand and profit damage.

Three Ways Online Ads Violate Privacy

Online ads can violate privacy in a number of ways, learn more about how user data may be at risk

Privacy Guard Overview

Understand the ad ecosystem and how Privacy Guard's technology provides tailored solutions to detect and resolve privacy issues.

Privacy Guard Fact Sheet

Learn more about how Boltive's new tool Privacy Guard delivers key insights you need to keep your consumer data -- and your brand reputation -- safe.

Privacy Guard Details

Get an overview of the online ad ecosystem, and how Boltive's new tool Privacy Guard can help keep your consumer data -- and your brand reputation -- safe.

Opt-outs Routinely Fail

Did you know 15-30% of consent opt-outs designed to protect personal data routinely fail?

Interest Based Ads

Interest Based Ads Often Share Sensitive Private Information

Fortune 100 CCPA

63 of F100 Companies Don’t Meet CCPA Standards, 33 Use Methods That Often Fail

The Publisher Ad Security Checklist

The ad ecosystem is like the wild west. Legitimate advertisers and publishers are leaving themselves and their partners exposed to consequences due to non-compliance.

5 Ad Quality Malware Trends for 2022 and Beyond

Stay ahead of the game with our article on 5 Ad Security Malware Trends for 2022 and Beyond. Protect your business from evolving threats. Read now on Boltive.

CPPA Testimony on Dark Signals

Current technologies and methods used today routinely interfere with Consumer Rights to Opt-Out. As important as it is to address dark patterns, it’s just as important to address dark signals.

How to prepare for the new state privacy laws in 2023

While 2023 may seem like a long way off, it will come around quicker than you think. It is never too early to prepare - particularly when it comes to updating your data privacy processes to remain compliant.

Chrome’s Heavy Ad Intervention: Here’s How We’re Solving It

As a member of the Coalition of Better Ads, Google has long been an advocate for blocking ads that hamper the user experience. But they took in one step further in fall 2020.

Part 2: Should We Prepare? An Interview with CPRA Co-author Rick Arney (pt. 2)

An interview with Rick Arney, board member of Californians for Consumer Privacy (CCP), and co-author of CCPA and CPRA

5 things you need to know about privacy regulations and programmatic advertising

The digital advertising ecosystem is large and complex. And it’s expanding.

How Publishers Can Increase Revenue by Creating a Great Ad Experience in 2022

The perception and tolerance of digital advertising is changing.

Part 1: Should We Prepare? An Interview with CPRA Co-author Rick Arney

An interview with Rick Arney, board member of Californians for Consumer Privacy (CCP), and co-author of CCPA and CPRA

3 To-Dos to Ensure Compliance & Stop Ad Privacy Violations

3 Programmatic Trends in 2022 - That Didn't Happen in 2021

Our forecast of what's to come in 2022

Our Director of Product, Christine Desrosiers, discusses the current state of Ad Tech with Brand Safety Institute

Boltive featured in Quirk's Media

Boltive featured in Quirk's Media article on how to comply with changing data privacy regulation

Why Ad Lightning Became Boltive

The next clear step in protecting against invasive media.

California Privacy Takeaways from ANA-BAA Law Marketing Conference

Several key takeaways from presentations related to California regulations.

The Data is In! Ad Lightning’s 2021 Q2 Malware Report

We recently published our 2021 Q2 Malware Recap, so take a look at what has been plaguing website publishers and users this quarter.

Ad Lightning’s Interview with Monetization Platform Setupad

Six months ago, we partnered with Setupad and replaced their legacy ad quality solution to improve their coverage against bad ads.

Ad Lightning’s New Platform Partners Help Move the Ad Quality Fight Upstream

We're delighted to tell you about the significant uptick Ad Lightning has seen in platform partnerships in recent months.

What Ad Lightning’s Stellar NPS Score Means to Our Business & Partners

We place so much importance on NPS, I wanted to take a few minutes to explain what it is and how we use it at Ad Lightning

The Digital Ad Industry Set Records in 2020, but It’s Not Time to Relax

2020 was historic, and I don’t mean that in a good way. But there’s always a silver lining, even in the most trying of times.

Ad Lightning Makes Video QA Fast and Easy to Maximize Publisher ROI

Ad Lightning's video QA tool maximizes publisher ROI by identifying issues before ads go live. Fast, easy, and effective. Learn more at Boltive.

Ad Lightning’s Look at the Digital Advertising Industry in 2021

This is what Ad Lightning is providing to the ecosystem with our Look at the Digital Advertising Industry in 2021 – a prescient, thoughtful, practical group of insights that publishers and platforms can use to successfully navigate an uncertain future.

3 Common Malicious Tactics: A Peek Into How Malware Operates

We're going to show you some of the most common gaps in the ad quality armor we’ve seen in the ecosystem and discuss what you can do to fill them.

Changes to CCPA Put Retargeting in the Regulatory Bullseye

You've reached the beginning!

All Resources

You're up to date!

All Resources

Frequently asked questions

Everything you need to know about Boltive, our technology, and how we help reduce digital risk.

Still have questions?