Apple's latest WebKit privacy restrictions are changing how identity resolution works across the open web. Here's what changed, why it matters for advertisers, and what it signals about the future of identity, AI, and addressability.
For years, the digital advertising industry has adapted to a world with fewer cookies, tighter privacy restrictions, and growing limits on how consumers can be recognized across websites. Each new restriction has pushed advertisers and technology providers to rethink how they connect data, reach audiences and measure performance.
Now, Apple is taking that evolution a step further.
With Safari 27 and WebKit updates, Apple is blocking network access to certain third-party identity resolution infrastructure used for cross-site tracking. Instead of simply restricting cookies or limiting how identifiers are stored, the new protections can prevent requests from reaching the identity resolution services themselves.
The announcement has generated significant attention across the AdTech industry, raising questions about the future of browser-based identity, alternative identifiers, and addressability across the open web.
But beyond the immediate disruption, Apple's decision highlights something more fundamental: the industry's long-term identity strategy cannot depend solely on its ability to recognize people inside a browser.
Understanding why requires looking at what Apple changed, what those restrictions actually affect, and how the role of identity is evolving.
What changed with Apple's Safari 27 identity resolution restrictions?
On October 19, 2026, Apple's WebKit team published Blocking Identity Resolution Infrastructure, explaining its decision to restrict technologies that enable third parties to identify and track people across websites.
The announcement targets a particular approach to identity resolution that became more prominent as third-party cookies lost their effectiveness.
In a typical scenario, someone enters their email address to log into a website or subscribe to a newsletter. A third-party identity resolution service may receive that information, associate it with a persistent identifier, and use that connection to recognize the same individual across other websites.
According to Apple, this can enable cross-site tracking that goes beyond what consumers reasonably expect when providing personal information to a particular website.
Safari 27 addresses this by blocking network requests to certain identity resolution infrastructure at the domain level. These protections apply to Safari and WebKit in Apple's iOS, iPadOS, macOS, and visionOS 27 releases.
This is an important technical distinction. Traditional cookie restrictions limit how information can be stored or accessed. Apple's latest approach can prevent communication with designated identity resolution services altogether, making it more difficult to maintain browser-based cross-site recognition through those services.
However, the announcement does not mean that all forms of identity resolution are blocked or that first-party personalization is disappearing. Apple specifically distinguishes legitimate first-party experiences from third-party infrastructure used to facilitate cross-site tracking.
The distinction matters because identity resolution encompasses many different technologies, data sources, and business use cases. Not all identity systems operate through browser-based collection, and not all identity use cases involve tracking a person across unrelated websites.
Why does Apple's decision matter for advertisers and the AdTech industry?
The immediate implications are significant for companies whose audience recognition, targeting, or measurement workflows depend on the affected browser-based infrastructure.
Over the past several years, alternative identity solutions have become an important part of the industry's response to third-party cookie restrictions. Email-based identifiers, identity graphs, and other approaches have helped businesses connect fragmented signals and support advertising across digital environments.
Apple's move introduces a new consideration: even when an identity solution no longer depends on third-party cookies, it may still depend on browser access to infrastructure that can be restricted.
For advertisers, this creates questions about the resilience of their identity and activation strategies. If a critical identity resolution request is blocked, workflows that depend on that request may be affected, potentially reducing recognition or complicating audience activation and measurement.
The impact will vary by provider, implementation, channel, and use case. It would be inaccurate to conclude that every identity graph, deterministic matching solution, or first-party data strategy is affected in the same way.
What the announcement does make clear is that replacing a cookie with another persistent identifier does not necessarily eliminate browser dependency.
And as privacy protections continue to evolve, the industry faces a larger challenge than finding a replacement for the latest restricted technology.
It needs to reconsider the foundation on which addressability is built.
Identity resolution is evolving beyond browser-based tracking
Identity resolution has often been discussed in terms of how effectively companies can connect identifiers, improve match rates, and recognize users across devices or platforms.
Those capabilities remain important, but they are not identity's ultimate purpose.
The real value of identity lies in what reliable connections make possible: understanding customers more accurately, improving first-party data, developing relevant audiences, enabling activation, and connecting marketing investments to measurable business outcomes.
This distinction becomes particularly meaningful when identity infrastructure is no longer tied to a browser event.
A deterministic identity foundation built on verified, real-world data can help organizations link customer records and identifiers independently of browser-based cross-site tracking. Where data rights, permissions, and applicable rules allow, those connections can support customer intelligence, data enrichment, audience development, and activation through appropriate channels.
That does not make the data exempt from privacy requirements or guarantee access to every advertising environment. It means the underlying identity intelligence can have applications beyond the browser mechanisms used for tracking.
At Deep Sync, we believe this is where the industry's conversation needs to evolve.
Identity should not be defined only by how many identifiers can be matched, but by the accuracy of those connections and the value they create.
For organizations working with fragmented customer information, reliable identity can turn disconnected records into a more useful understanding of people, households and relationships. That understanding can support better decisions across marketing, analytics and customer engagement, even as individual activation environments change.
Why AI makes deterministic identity more important
The timing of Apple's announcement is especially relevant as artificial intelligence and predictive modeling become more central to digital advertising.
As access to user-level identifiers becomes more limited in certain environments, advertisers are exploring ways to reach relevant audiences through modeling, contextual signals, first-party relationships, and other approaches that do not always require direct recognition of a specific person when an impression becomes available.
This creates new opportunities for AI-powered addressability, but it also places greater importance on the quality of the data informing those models.
Predictive systems learn from the information used to develop and evaluate them. When that information contains inaccurate connections, duplicates, outdated records, or fragmented customer identities, those weaknesses can influence the resulting predictions.
A reliable identity foundation can help improve the quality of training and evaluation data, providing more accurate relationships and better-defined audiences for models to learn from.
AI doesn't make identity less relevant. It makes accurate identity more valuable.
The future of advertising intelligence will not be determined solely by the sophistication of predictive algorithms. It will also depend on the reliability of the data and the identity relationships that support it.
What does the future of addressability look like?
Apple's restrictions are unlikely to eliminate the need for identity resolution. They are accelerating a shift in how identity intelligence can be created, connected, and activated responsibly.
First-party data will play an increasingly important role as companies strengthen direct relationships with their customers and invest in understanding the information they already have. Connected TV and other addressable environments will continue to offer opportunities for audience activation through their respective identity frameworks and privacy requirements.
Server-side partnerships and approved data collaboration models may also support use cases that do not rely on affected browser-side requests. However, moving a process outside the browser does not automatically make it privacy-compliant or exempt it from platform policies. The purpose of the data use, the permissions involved, and the methods of activation still matter.
Measurement is evolving alongside these changes. Rather than relying exclusively on persistent identifiers to follow individuals across digital touchpoints, advertisers will increasingly need approaches that combine reliable underlying identity data with aggregated analysis, privacy-conscious measurement and meaningful business outcomes.
Together, these developments point toward a future in which addressability depends less on the ability to recognize every browsing event and more on the quality of the intelligence supporting each marketing decision.
Deep Sync's perspective
Better intelligence starts with better identity.
At Deep Sync, our approach to identity begins with verified, real-world person-level data and deterministic connections, rather than relying on browser-based tracking to establish the underlying identity foundation.
Our identity spine helps businesses connect fragmented customer information, improve data quality, and develop a more reliable understanding of the people and households behind their records. That intelligence can support a range of use cases, from customer enrichment and audience development to activation and measurement through appropriate environments.
We believe the accuracy of an identity connection matters more than match volume alone. A match rate may describe how many connections a system can make, but it does not automatically show whether those connections are reliable or deliver meaningful business value.
Apple's announcement reinforces the importance of distinguishing identity intelligence from cross-site tracking. Building identity infrastructure that doesn't depend on browser calls should not be confused with trying to recreate the same tracking practices through different technical methods.
The future requires both reliable data and responsible use.
For marketers, that means evaluating identity not simply as an identifier-matching tool, but as an infrastructure investment that supports better customer understanding, stronger decision-making and more resilient activation strategies.
The future of identity starts with a better foundation
Apple's latest privacy restrictions mark another important moment in the evolution of digital advertising. But they also offer an opportunity to move the conversation beyond cookies, browser calls, and alternative tracking identifiers.
The questions facing the industry are becoming more strategic. How can businesses develop better customer intelligence as privacy expectations evolve? How can AI models become more accurate when individual identifiers are unavailable? How can identity infrastructure support meaningful outcomes without relying on tracking practices that platforms and consumers increasingly reject?
These questions will shape the next era of identity resolution and addressability.
The open web is not disappearing, and neither is the need for companies to understand and reach relevant audiences. What is changing is how the industry builds the intelligence required to do so.
The future of identity isn't about finding new ways to track people. It's about creating a more accurate, responsible, and resilient foundation for understanding them.
And better intelligence starts with better identity.
Build addressability on a foundation that holds
Talk to our team about deterministic identity built from verified, real-world data, and how it supports enrichment, audience development, activation and measurement without depending on browser-based tracking.
Julia is Director of Product Marketing at Deep Sync, specializing in identity resolution, customer data, audience activation, and go-to-market strategy. She helps brands turn complex data into actionable insights that power better marketing, personalization, and customer engagement.
Let's connect →
