{"id":178455,"date":"2018-11-23T19:20:00","date_gmt":"2018-11-24T00:20:00","guid":{"rendered":"https:\/\/www.panix.com\/~msaroff\/40years\/2018\/11\/23\/your-mouth-to-gods-ear-2\/"},"modified":"2018-11-23T19:20:00","modified_gmt":"2018-11-24T00:20:00","slug":"your-mouth-to-gods-ear-2","status":"publish","type":"post","link":"https:\/\/www.panix.com\/~msaroff\/40years\/2018\/11\/23\/your-mouth-to-gods-ear-2\/","title":{"rendered":"Your Mouth to God’s Ear"},"content":{"rendered":"

There has been a ruling involving a small French advertising firm which could completely reshape online advertising<\/a>.<\/p>\n

Basically, the court ruled that consent to collect information could not be passed onto third parties though a contract under the European Union’s General Data Protection Regulation (GDPR) regulations.<\/p>\n

If this stands, it will completely reshape internet advertising, IMNSHO for the better:<\/p>\n

A ruling in late October against a little-known French adtech firm that popped up on the national data watchdog\u2019s website earlier this month is causing ripples of excitement to run through privacy watchers in Europe who believe it signals the beginning of the end for creepy online ads. <\/p>\n

The excitement is palpable. <\/p>\n

Impressively so, given the dry CNIL decision<\/a> against mobile \u201cdemand side platform\u201d Vectaury was only published in the regulator\u2019s native dense French legalese.<\/span><\/p><\/blockquote>\n

\n
\n
Here is the bombshell though: Consent through the @IABEurope<\/a> framework is inherently invalid. Not because of a technical detail. Not because of an implementation aspect that could be fixed. No.<\/span>
You cannot pass consent to another controller through a contractual relationship. BOOM pic.twitter.com\/xMlNHJTKwl<\/a><\/span><\/div>\n

\u2014 Robin Berjon (@robinberjon) November 16, 2018<\/a><\/span><\/p><\/blockquote>\n

\u2026\u2026\u2026<\/p>\n

In plainer English, this is being interpreted by data experts as the regulator stating that consent to processing personal data cannot be gained through a framework arrangement which bundles a number of uses behind a single \u201cI agree\u201d button that, when clicked, passes consent to partners via a contractual relationship.<\/p>\n

\u2026\u2026\u2026<\/p>\n

The firm was harvesting a bunch of personal data (including people\u2019s location and device IDs) on its partners\u2019 mobile users via an SDK embedded in their apps, and receiving bids for these users\u2019 eyeballs via another standard piece of the programmatic advertising pipe \u2014 ad exchanges and supply side platforms \u2014 which also get passed personal data so they can broadcast it widely via the online ad world\u2019s real-time bidding (RTB) system. That\u2019s to solicit potential advertisers\u2019 bids for the attention of the individual app user\u2026 The wider the personal data gets spread, the more potential ad bids.<\/p>\n

That scale is how programmatic works. It also looks horrible from a GDPR \u201cprivacy by design and default\u201d standpoint.<\/span><\/p><\/blockquote>\n

This cuts to the core of the current advertising model, and Google and Facebook’s current dominance of online advertising.<\/p>\n

It should get very interesting.<\/p>\n","protected":false},"excerpt":{"rendered":"

There has been a ruling involving a small French advertising firm which could completely reshape online advertising. Basically, the court ruled that consent to collect information could not be passed onto third parties though a contract under the European Union’s General Data Protection Regulation (GDPR) regulations. If this stands, it will completely reshape internet advertising, …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[395,630,367,407,366,437],"class_list":["post-178455","post","type-post","status-publish","format-standard","hentry","tag-computer","tag-european-union","tag-internet","tag-justice","tag-privacy","tag-regulation"],"_links":{"self":[{"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/posts\/178455"}],"collection":[{"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/comments?post=178455"}],"version-history":[{"count":0,"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/posts\/178455\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/media?parent=178455"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/categories?post=178455"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/tags?post=178455"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}