A decision by the DPA’s Litigation Chamber on the merits of the complaints against the IAB Europe (IAB) was released on 2 February 2022, prompting widespread commentary and response from an expectant audience. Almost a sigh of relief – the perspective of not just the Belgian DPA but most EU regulators on TCF is in the open, and the industry can now respond.
It is welcome and whilst the path ahead is tricky, there is now a path.
Is this decision good for consumers? Yes of course, consumers should absolutely be in control of how their personal data is used.
Is this decision good for MediaMath and the wider industry? Our view is again yes, but there is much work to be done.
The IAB EU are now tasked with presenting their plan for implementing the decision’s corrective measures, but in fact this decision is a call to action for the industry to ensure transparency and choice are offered and actioned in a meaningful, effective way. MediaMath were instrumental in spearheading the initial development of the TCF, and its evolution to v2. Perfect is hard, perhaps impossible, but the evolution continues, and this decision highlights the requirements of the next iteration of TCF.
MediaMath is committed to supporting industry collaboration, which is now needed across the whole supply chain from publishers, SSP, DSPs and advertisers to reach the goal and lawful requirements of enhancing transparency to individuals (both as a data ethics principle and as required by GDPR) through meaningful and easy to understand disclosures to users, and by ensuring respect for those user preferences is honoured and clearly actioned along the entire user journey.
MediaMath’s view is that TCF has not been invalidated by this decision. A clear pathway to compliance has been set and the IAB have commented publicly that they “look forward to working with the APD on an action plan”. We welcome this, and we hope that successful implementation of corrective measures provides a bright line for the industry’s continued compliance with GDPR.
The industry needs to work together across the full supply chain to avoid unintended consequences from this decision. There is much to pore over in the decision, and we expect considerable focus to be placed on the lawful basis for processing personal data for the purposes of advertising. The decision casts doubt on the lawfulness of any consent given by consumers, and prohibits reliance on legitimate interest. This requires careful consideration, to avoid any unintended consequences. Publications rely on advertising, and indeed consumers expect (or have grown accustomed to) advertising in media whether that be print or digital. To crystalise the issue, prohibiting legitimate interest has a direct impact on the ability to deliver even a basic ad, resulting in white space on the consumer’s screen. A way through is needed – for consumers, publishers, and advertisers.
MediaMath champions radical transparency. We believe that consumers should understand how their data is being used, and how it is being protected. This is fundamental to our modernized ecosystem. We are putting consumer choice in the hands of the consumer, with the launch of our access request portal.
MediaMath is committed to ensuring Privacy by Design principles informed by data ethics, is implemented in our own services, and by championing the same data ethics approach across all our partners in the supply chain, with ensuring the consumer is always at the heart of privacy by design, at each stage of the consumer journey. The corrective measures set out in the DPA’s decision are a blueprint for all industry partners to measure themselves against, and we have a compelling story in that respect.
MediaMath has assembled a strong privacy team to demonstrate and implement global privacy compliance. Headed up by our Chief Privacy Officer, Fiona Campbell-Webster, in the USA, as well our official Data Protection Officer, James Kerr in Europe and the U.K, each with clearly delineated responsibilities and who work together with Ferdinand David, VP, Product, Policy & Compliance, to continuously assess and refine our capability to technically comply with the legal and privacy requirements of GDPR and all other applicable laws. We have a clear goal to support positive business outcomes for our clients by building and scaling privacy-first trusted programmatic journeys through transparency and choice for the consumer.
The coming weeks and months will be an exciting time for our industry.