The organisations that treated the anticipated deprecation of third-party cookies not as a compliance event but as a strategic opportunity have, two years on, accumulated advantages that are proving difficult to replicate at speed. Their data infrastructure — built around identity resolution, clean-room partnerships, and sophisticated consent architectures — now functions as a competitive moat that their less-prepared peers are discovering the hard way.