As the digital advertising industry navigates an increasingly complex regulatory landscape, companies continue to refine their compliance strategies in response to 19 comprehensive state privacy laws that are either in effect or soon to be enacted.
To foster greater clarity and consensus on how these laws apply in practice, the IAB Legal Affairs Council conducted a survey of key stakeholders, including publishers, sell-side and buy-side ad tech companies, agencies, brands, and legal professionals. The survey explored the implementation of state privacy laws and emerging best practices, covering critical topics such as sensitive personal information, data clean rooms, data minimization, secondary use limitations, vendor due diligence, and data de-identification.
Here are the key takeaways:
- Companies prefer a unified compliance approach to state privacy laws rather than a state-specific strategy.
- Defining sensitive personal information remains a challenge, particularly for health data and minors’ information.
- Most respondents recognize that data clean rooms cannot fully de-identify personal information. The prevailing market practice designates data clean room providers as a “service provider/processor.”
- For third-party due diligence, the industry primarily relies on questionnaires, favoring those tailored to the digital advertising sector.
Download the report to gain deeper insights into these findings and explore the detailed best practices recommended by industry experts.
