This note examines a Belgian court ruling against Facebook's tracking and approach to consent. Facebook and adtech companies should expect tough sanctions when they find themselves before European courts - unless they change their current approach to data protection and the GDPR. Facebook is playing a dangerous game of “chicken” with the regulators. First, it has begun to confront users in … Continue reading Facebook and adtech face a turbulent time in Europe’s courts: the Brussels case.
This note examines the recently published IAB “transparency and consent” proposal. Major flaws render the system unworkable. The real issue is what should be done with the vast majority of the audience who will not give consent. Publishers would have no control (and are expected to blindly trust 2,000+ adtech companies) The adtech companies who drafted … Continue reading Risks in IAB Europe’s proposed consent mechanism
This week PageFair wrote to the permanent representatives of all Member States of the European Union in support for the proposed ePrivacy Regulation. Our remarks were tightly bounded by our expertise in online advertising technology. We do not have an opinion on how the proposed Regulation will impact other areas. The letter addresses four issues: … Continue reading PageFair writes to all EU Member States about the ePrivacy Regulation
The follow up to the International Association of Privacy Professionals' most listened to podcast of 2017. Angelique Carson of the International Association of Privacy Professionals quizzes PageFair's Dr Johnny Ryan on the crisis facing publishers, as they grapple with adtech vendors and attendant risks ahead of the GDPR. The podcast covers: Why personal data can not be used without … Continue reading Adtech must change to protect publishers under the GDPR (IAPP podcast)
This note discusses a letter that PageFair submitted to the Article 29 Working Party. The answers may shape the future of the adtech industry. Eventually the data protection authorities of Europe will gain a thorough understanding of the adtech industry, and enforce data protection upon it. This will change how the industry works. Until then, we are in … Continue reading PageFair’s long letter to the Article 29 Working Party
This note outlines how an anomaly in European law will impact cookie storage and presents wireframes of permission requests for non-tracking cookies. Online media will soon find itself in an anomalous position. It will be necessary to apply the GDPR’s consent requirements to cookies that reveal no personal data, even though the GDPR was not … Continue reading GDPR’s non-tracking cookie banners
This note examines the range of distinct adtech data processing purposes that will require opt-in under the GDPR. In late 2017 the Article 29 Working Party cautioned that “data subjects should be free to choose which purpose they accept, rather than having to consent to a bundle of processing purposes”. Consent requests for multiple purposes … Continue reading GDPR consent design: how granular must adtech opt-ins be?
This note examines whether websites can use "tracking walls" under the GDPR, and challenges the recent guidance on this issue from IAB Europe. This week, IAB Europe published a paper that advises website owners that tracking walls (i.e., modal dialogs that require people to give consent to be tracked in order to access a website) will be … Continue reading Can websites use “tracking walls” to force consent under GDPR?
Websites and advertisers can not prevent personal data from leaking in programmatic advertising. If not fixed, this will render consent to use personal data meaningless. The GDPR applies the principle of transparency: People must be able to easily learn who has their personal data, and what they are doing with it. Equally importantly, people must have surety … Continue reading Adtech consent is meaningless unless one stops data leakage
This note presents the results of a survey of 300+ publishers, adtech, brands, and various others, on whether users will consent to tracking under the GDPR and the ePrivacy Regulation. In early August we published a note on consent, and asked whether people would click "yes". We would like to thank the 300+ colleagues who … Continue reading Research result: what percentage will consent to tracking for advertising?
Google and Facebook will be disrupted by the new European data protection rules that are due to apply in May 2018. This note explains how. Google and Facebook will be unable to use the personal data they hold for advertising purposes without user permission. This is an acute challenge because, contrary to what some commentators have assumed, they cannot use a “service-wide” opt-in for … Continue reading How the GDPR will disrupt Google and Facebook
In the last month, we have written to the MEPs leading the Parliament's work on the ePrivacy Regulation (the "rapporteurs") to propose an amendment. Here is a copy of the letter. PageFair supports the proposed ePrivacy Regulation, in so far as it will change online behavioural advertising. This is an unusual position for an ad tech company, … Continue reading The Privacy Case for Non-Tracking Cookies: PageFair writes to the European Parliament
THIS NOTE HAS NOW BEEN SUPERSEDED BY A A MORE RECENT PAGEFAIR INSIDER NOTE ON GDPR CONSENT DIALOGUES. PLEASE REFER TO THE NEW NOTE. This note presents sketches of GDPR consent dialogues, and invites readers to participate in research on whether people will consent. [x_alert heading="Note" type="info"]It is important to note that the dialogue presented … Continue reading Here is what GDPR consent dialogues could look like. Will people click yes?
This note explains the three deepest challenges that the online advertising industry must overcome to survive the new European data rules. It also outlines our approach. The General Data Protection Regulation (GDPR) and the ePrivacy Regulation (ePR) pose particular challenges for publishers, brands, and adtech companies. These go beyond the normal gap analysis and security overhaul that other businesses … Continue reading The 3 biggest challenges in GDPR for online media & advertising
Brands face serious new risks under the GDPR and the ePrivacy Regulation (ePR), and agencies will not be able to shield them. This note explains why, and describes what these risks are. When the GDPR and the ePrivacy Regulation (ePR) apply a year from now brands that use personal data in their marketing campaigns will become exposed … Continue reading Risks to brands under new EU regulations
Lightly edited transcription of PageFair remarks at rapporteur's sessions at the European Parliament in Brussels on 29 May 2017, concerning the ePrivacy Regulation. Statement at roundtable on Articles 9, and 10. Dr Johnny Ryan: Thank you. PageFair is a European adtech company. We are very much in support of the Regulation as proposed, in so far … Continue reading PageFair statement at European Parliament rapporteur’s ePrivacy Regulation roundtable
Pseudonymization will not save online advertising companies from having to seek consent to use browsing and other personal data. This note explains why. Personal data will become toxic in May 2018 when the General Data Protection Regulation is applied, unless data subjects have given consent. Some businesses may try to rely on “pseudonymization”, a partial … Continue reading Why pseudonymization is not the silver bullet for GDPR.
Lightly edited transcription of PageFair remarks at European Parliament ALDE session on 4 May 2017. Dr Johnny Ryan: Thank you. It’s a pleasure to be with you this afternoon. I’ve been on both sides: the adtech side, and the publisher’s side, of the particular part of this story that I want to talk about. Several … Continue reading PageFair statement at European Parliament ALDE shadow rapporteurs session on the proposed ePrivacy Regulation
In July I wrote on this blog that "online advertising is destroying itself". That was two days before I joined PageFair and started to work on the problem. Earlier this month (September) I organised a meeting of global publishing leaders in the boardroom of The Financial Times to consider how best to address ad blocking. The … Continue reading The start of something to save publishers on the open Web
Online advertising is destroying itself. And it is doing so in a way that will fatally undermine online publishers' sustainability. Increasingly brash formats and data snooping by online advertisers are driving millions of people to sever publishers’ revenue lifelines by blocking all advertising. The outlook is very bleak indeed. Publishers’ are desperate to extract revenues from … Continue reading Online advertising is destroying itself.
This is a piece I originally published in Contagious.An understandable malaise in ad agencies surrounds all things digital. Low revenues on the one hand and a new answerability to metrics on the other are accompanied by a sense that digital formats remain largely underdeveloped, and that new, possibly unwelcome, surprises await. This is a moment … Continue reading Advertising’s historic pivot point
I'm getting worried that Apple could sell me... to myself. Here's how _____________________________ Announcing the iME from Apple. What is it? Well, it starts when you start wearing elegant white or charcoal clothing. Then you have a general feeling of aloofness and only partial compatibility with your fellow human beings. You'll quickly get used … Continue reading Apple Marketing