Google temporarily rolls back its SameSite policy in Chrome, to allow stability for essential service websites that may not meet third party cookie requirements
Google says it wants to provide stability during the COVID-19 outbreak — With the launch of Chrome 80 in February …
Context & Ripple Effects
Chrome 80's February launch made SameSite enforcement live, requiring sites to label their cookies or lose cross-site behavior — and within weeks Google pulled the lever back, citing stability for essential services during the COVID-19 outbreak. The rollback was always framed as temporary: by late May Google had committed to resuming the update on July 14 alongside Chrome 84.
What makes this worth tracking is what it turned into. The same enforcement timeline kept stretching — a deferral of full third-party cookie blocking from early 2022 to late 2023 to protect ad-dependent publishers, then another slip to H2 2024 pending Privacy Sandbox tests — making the April pause the first data point in a multi-year pattern.
First-order effects
- Essential-service sites that hadn't met the new cookie-labeling requirements get an immediate reprieve from Chrome 80's enforcement, avoiding broken logins and sessions during peak pandemic usage.
- Ad-tech and publishers relying on cross-site cookies escape the February deadline's breakage risk, but only until the announced July 14 resumption with Chrome 84.
Second-order effects
- Developers get a hard reset deadline rather than open-ended relief, forcing remediation work to compress into the window between the rollback and the Chrome 84 relaunch.
- Google's willingness to bend its own privacy enforcement under external pressure signals to the ad ecosystem that Chrome's cookie timelines are negotiable — an expectation the later delays confirmed.
Third-order effects
- If the pattern holds, browser-enforced privacy changes become elastic deadlines set by the platform owner's own commercial exposure: each deferral (COVID pause, 2023 push, H2 2024 push) trades near-term publisher pain for longer dependence on Google's replacement technologies like Privacy Sandbox.
- Third-party cookie deprecation consolidates into a single gatekeeper decision point, where whoever controls the dominant browser effectively sets the ad industry's migration clock.
The trend: Browser-mandated cookie reform keeps slipping as Google balances privacy commitments against disruption to ad-dependent publishers, with each deadline extension resetting the ecosystem's migration clock.