Navigating Data Protection in Digital Advertising with the IAB Data Protection Assessment Template

Compliance with U.S. state privacy laws is paramount in the fast-evolving landscape of digital advertising. Most U.S. state privacy laws require a controller to conduct a data protection assessment for personal information processing activities that present a heightened risk of harm to consumers. Such activities generally include processing personal information for purposes of targeted advertising, sale of personal information (usually broadly defined), processing sensitive personal information, and processing personal information for purposes of profiling, where the profiling presents a reasonably foreseeable risk.

The IAB Data Protection Assessment Template (the “Assessment Template”) is designed to help businesses in the digital ad industry evaluate processing activities based . . .