About Karel Kubicek
Karel Kubicek is Lead Privacy & AI Researcher at Vault JS. He holds a PhD from ETH Zurich, where his research focused on automated GDPR compliance monitoring of websites, and he studies web tracking, consent mechanisms and fingerprinting.
Articles by Karel Kubicek
CIPA in 2026: 318 decisions, zero trial verdicts, and what a claim is really worth
We analyzed every internet-tracking decision under CIPA since 2022. None is a trial verdict, the defense wins 31.1% of the time, and the median disclosed...
Cookie Compliance in 2026: Why Consent Banners Don’t Prevent Enforcement Actions
Consent banners alone do not guarantee cookie compliance. Regulators now focus on actual third-party data flows, tracking pixels, cookie syncing, fingerprinting, and unauthorized data sharing....
Read More
Server-Side Fingerprinting Explained: How Tracking Works Without Cookies
Server-side fingerprinting links user sessions even when browser signals change. This post explains how it works, why traditional defenses fail, and the risks it creates...
Read More
What Changed in GDPR Enforcement in 2025? How Regulators Shifted from Policy Audits to Operational Accountability
By 2025, European regulators made a clear shift in approach: compliance is no longer judged by the wording of a privacy policy, but by the...
Read More
U.S. Privacy Laws (and Key Provisions) That Take Effect or Become Enforceable in 2026
2026 is a turning point in U.S. privacy regulation: multiple new comprehensive state laws go live, enforcement provisions activate, and novel mechanisms (like the California...
Read More
Is Your Website Wiretapping Users? How CIPA Turns Tracking Pixels Into Legal Liability
Modern privacy regimes such as the GDPR and CCPA bring strong privacy requirements, yet their lack of robust enforcement makes the compliance limited. By contrast,...
Read More
See what your sites and apps actually send
Get a free site analysis: every tracker, mapped to the laws that apply to it.