The U.K. Information Commissioner's Office found Google's proposed third-party cookie replacement, the Privacy Sandbox, needs to better protect users' personal data, according to ICO draft documents obtained by The Wall Street Journal. A review of the the ICO report found, as presently constituted, the Privacy Sandbox contains gaps that could be exploited to identify users.