{"id":6085,"date":"2022-02-07T14:49:32","date_gmt":"2022-02-07T14:49:32","guid":{"rendered":"http:\/\/clickceaseblog.kinsta.cloud\/?p=6085"},"modified":"2022-06-15T06:56:55","modified_gmt":"2022-06-15T06:56:55","slug":"gdpr-vs-iab-february-2022","status":"publish","type":"post","link":"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/","title":{"rendered":"Marketing vs GDPR: Europe Rules IAB\u2019s Consent Mechanism Illegal"},"content":{"rendered":"\n<h2>IAB\u2019s Consent Mechanism Illegal<\/h2>\n\n\n\n<p>Whether you regularly click on the \u2018accept all\u2019, or you carefully go through the permissions to \u2018save preferences\u2019; the truth is that those marketing consent pop-ups don\u2019t pass muster with European GDPR regulations.<\/p>\n\n\n\n<p>In fact, the Belgian DPA ruled, in February 2022, that the IAB\u2019s Transparency and Consent Framework (TCF) violates GDPR and European law. (<a href=\"https:\/\/www.dataprotectionauthority.be\/citizen\/iab-europe-held-responsible-for-a-mechanism-that-infringes-the-gdpr\">press release<\/a>)<\/p>\n\n\n\n<p>The underlying claims are that the TCF does not process personal data securely, as required by GDPR. Alongside these claims, the Litigation Chamber of the DPA found that the definition of \u2018legitimate interest\u2019 has not been properly defined and that data is routinely sold \u2018hundreds of times a day\u2019 which contravenes the law in Europe.<\/p>\n\n\n\n<p>As a result of this finding, the Litigation Chamber of the Belgian DPA has imposed a fine of \u20ac250,000 on IAB Europe. The IAB have also been ordered to bring their data collection framework into alignment with the European laws within six months.&nbsp;<\/p>\n\n\n\n<p>The DPA has also informed IAB Europe that it needs to delete all information collected as part of the TCF \u2018without undue delay\u2019. In short, the raw materials for ad targeting used by Google, Facebook, Amazon and the ad platforms have been ruled illegal and need to be deleted for European Union users.<\/p>\n\n\n\n<h2 id=\"how-we-got-here\">How we got here\u2026<\/h2>\n\n\n\n<p>The Interactive Advertising Bureau (IAB) is an American based business whose aim is to maintain digital standards online. This includes helping advertising platforms and publishers to stay on the right side of the law with regards to data processing &#8211; such as collecting third party cookies.<\/p>\n\n\n\n<p>However, the Irish Council for Civil Liberties (ICCL) brought a lawsuit against the IAB alleging that the European framework, the TCF, does not meet the standards of European law and violates privacy rights, despite its intention to protect them.<\/p>\n\n\n\n<p>Johnny Ryan of the ICCL, previously an ad-tech professional, said in an interview with <a href=\"https:\/\/www.forbes.com\/sites\/martyswant\/2022\/02\/02\/europes-new-ruling-on-data-consent-pop-ups-challenges-privacy-policies-for-publishers-and-advertisers\/\">Forbes<\/a>, \u201cThe tracking industry sought to cover the underlying huge data breach in online advertising.<\/p>\n\n\n\n<p>\u201cThey tried to make that problem go away with \u2018OK\u2019 buttons, but the industry knew is not possible to ask for someone \u2018OK\u2019 a data breach. You have to know what you\u2019re asking for.\u201d(sic)<\/p>\n\n\n\n<h2 id=\"what-does-this-mean-for-digital-marketing\">What does this mean for digital marketing?<\/h2>\n\n\n\n<p>Essentially, those pop-ups asking for your consent have been ruled illegal in Europe. By extension, this ruling will likely also be applicable to other regional data protection laws such as California\u2019s CCPA. It may be a matter of time before a similar lawsuit is brought against the IAB in different territories.<\/p>\n\n\n\n<p>For digital marketers using real-time bidding ads anywhere online, such as Google Ads, the consequences will translate to less targeted ads within Europe.<\/p>\n\n\n\n<p>However, although the ruling says that ad-tech platforms information on consumers needs to be deleted, it\u2019s likely that we\u2019ll see a legal counter from the IAB, which will mean the ruling is not acted on immediately.<\/p>\n\n\n\n<p>In fact, despite this ruling, the IAB Europe have released a statement that the ruling is: \u201c&#8230;wrong in law and will have major unintended negative consequences going well beyond the digital advertising industry. We are considering all options with respect to a legal challenge.\u201d<\/p>\n\n\n\n<p>This announcement also comes after Google\u2019s attempt to change the way data is collected online was rejected. <a href=\"https:\/\/www.clickcease.com\/blog\/google-cookies-your-ads-the-next-big-change-in-marketing\/\" data-type=\"post\" data-id=\"5191\">The 2021 announcement<\/a> around moving to \u2018cohorts\u2019 was designed to help keep online users anonymous. However, the move was widely rejected and seen as \u2018more of the same\u2019 as the major ad platforms struggle to keep up with their commitments to providing a privacy first web experience.<\/p>\n\n\n\n<p>For the moment at least, digital marketing remains \u2018business as usual\u2019. But the increasingly vocal calls for less tracking and more transparency around what data is held by the digital giants is putting the pressure on.<\/p>\n\n\n\n<p>Expect this to be ongoing news for a few more years yet.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>IAB\u2019s Consent Mechanism Illegal Whether you regularly click on the \u2018accept all\u2019, or you carefully go through the permissions to \u2018save preferences\u2019; the truth is that those marketing consent pop-ups don\u2019t pass muster with European GDPR regulations. In fact, the Belgian DPA ruled, in February 2022, that the IAB\u2019s Transparency and Consent Framework (TCF) violates [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":6089,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[11],"tags":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Marketing vs GDPR: IAB\u2019s Consent Mechanism | ClickCease Blog<\/title>\n<meta name=\"description\" content=\"For the moment at least, digital marketing remains \u2018business as usual\u2019. But the increasingly vocal calls for less tracking and more transparency around what data is held by the digital giants is putting the pressure on.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Marketing vs GDPR: IAB\u2019s Consent Mechanism | ClickCease Blog\" \/>\n<meta property=\"og:description\" content=\"For the moment at least, digital marketing remains \u2018business as usual\u2019. But the increasingly vocal calls for less tracking and more transparency around what data is held by the digital giants is putting the pressure on.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/\" \/>\n<meta property=\"og:site_name\" content=\"ClickCease Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ClickCease-484865984976254\/\" \/>\n<meta property=\"article:published_time\" content=\"2022-02-07T14:49:32+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-06-15T06:56:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.clickcease.com\/blog\/wp-content\/uploads\/2022\/02\/ClickCease-BLOG-Placeholder-LEGAL-GDPR.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1300\" \/>\n\t<meta property=\"og:image:height\" content=\"800\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Oli Lynch\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/OliLynchWrites\" \/>\n<meta name=\"twitter:site\" content=\"@clickcease\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Oli Lynch\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/\"},\"author\":{\"name\":\"Oli Lynch\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/b78aa0c9f82503dd2e1f6ea669e73d2b\"},\"headline\":\"Marketing vs GDPR: Europe Rules IAB\u2019s Consent Mechanism Illegal\",\"datePublished\":\"2022-02-07T14:49:32+00:00\",\"dateModified\":\"2022-06-15T06:56:55+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/\"},\"wordCount\":654,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/#organization\"},\"articleSection\":[\"PPC\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/\",\"url\":\"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/\",\"name\":\"Marketing vs GDPR: IAB\u2019s Consent Mechanism | ClickCease Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/#website\"},\"datePublished\":\"2022-02-07T14:49:32+00:00\",\"dateModified\":\"2022-06-15T06:56:55+00:00\",\"description\":\"For the moment at least, digital marketing remains \u2018business as usual\u2019. But the increasingly vocal calls for less tracking and more transparency around what data is held by the digital giants is putting the pressure on.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog\",\"item\":\"https:\/\/www.clickcease.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Marketing vs GDPR: Europe Rules IAB\u2019s Consent Mechanism Illegal\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#website\",\"url\":\"https:\/\/www.clickcease.com\/blog\/\",\"name\":\"ClickCease Blog\",\"description\":\"How to protect your ppc campaigns from click fraud.\",\"publisher\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.clickcease.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#organization\",\"name\":\"ClickCease\",\"url\":\"https:\/\/www.clickcease.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/clickceaseblog.kinsta.cloud\/wp-content\/uploads\/2019\/02\/cc-logo-black.png\",\"contentUrl\":\"https:\/\/clickceaseblog.kinsta.cloud\/wp-content\/uploads\/2019\/02\/cc-logo-black.png\",\"width\":300,\"height\":70,\"caption\":\"ClickCease\"},\"image\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/ClickCease-484865984976254\/\",\"https:\/\/twitter.com\/clickcease\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/b78aa0c9f82503dd2e1f6ea669e73d2b\",\"name\":\"Oli Lynch\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6703777663617e10544867a6e661a11c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6703777663617e10544867a6e661a11c?s=96&d=mm&r=g\",\"caption\":\"Oli Lynch\"},\"description\":\"Since working for ClickCease, Oli has become something of a click fraud nerd, and now bores people at parties with facts about click farms and internet traffic stats. When not writing about ad fraud, he helps companies to optimise their marketing content and strategy with his own content marketing business.\",\"sameAs\":[\"http:\/\/www.olilynch.com\/\",\"https:\/\/www.linkedin.com\/in\/olilynch77\/\",\"https:\/\/twitter.com\/https:\/\/twitter.com\/OliLynchWrites\"],\"url\":\"https:\/\/www.clickcease.com\/blog\/author\/oli\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Marketing vs GDPR: IAB\u2019s Consent Mechanism | ClickCease Blog","description":"For the moment at least, digital marketing remains \u2018business as usual\u2019. But the increasingly vocal calls for less tracking and more transparency around what data is held by the digital giants is putting the pressure on.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/","og_locale":"en_US","og_type":"article","og_title":"Marketing vs GDPR: IAB\u2019s Consent Mechanism | ClickCease Blog","og_description":"For the moment at least, digital marketing remains \u2018business as usual\u2019. But the increasingly vocal calls for less tracking and more transparency around what data is held by the digital giants is putting the pressure on.","og_url":"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/","og_site_name":"ClickCease Blog","article_publisher":"https:\/\/www.facebook.com\/ClickCease-484865984976254\/","article_published_time":"2022-02-07T14:49:32+00:00","article_modified_time":"2022-06-15T06:56:55+00:00","og_image":[{"width":1300,"height":800,"url":"https:\/\/www.clickcease.com\/blog\/wp-content\/uploads\/2022\/02\/ClickCease-BLOG-Placeholder-LEGAL-GDPR.jpeg","type":"image\/jpeg"}],"author":"Oli Lynch","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/OliLynchWrites","twitter_site":"@clickcease","twitter_misc":{"Written by":"Oli Lynch","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/#article","isPartOf":{"@id":"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/"},"author":{"name":"Oli Lynch","@id":"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/b78aa0c9f82503dd2e1f6ea669e73d2b"},"headline":"Marketing vs GDPR: Europe Rules IAB\u2019s Consent Mechanism Illegal","datePublished":"2022-02-07T14:49:32+00:00","dateModified":"2022-06-15T06:56:55+00:00","mainEntityOfPage":{"@id":"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/"},"wordCount":654,"commentCount":0,"publisher":{"@id":"https:\/\/www.clickcease.com\/blog\/#organization"},"articleSection":["PPC"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/","url":"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/","name":"Marketing vs GDPR: IAB\u2019s Consent Mechanism | ClickCease Blog","isPartOf":{"@id":"https:\/\/www.clickcease.com\/blog\/#website"},"datePublished":"2022-02-07T14:49:32+00:00","dateModified":"2022-06-15T06:56:55+00:00","description":"For the moment at least, digital marketing remains \u2018business as usual\u2019. But the increasingly vocal calls for less tracking and more transparency around what data is held by the digital giants is putting the pressure on.","breadcrumb":{"@id":"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.clickcease.com\/blog\/gdpr-vs-iab-february-2022\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https:\/\/www.clickcease.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Marketing vs GDPR: Europe Rules IAB\u2019s Consent Mechanism Illegal"}]},{"@type":"WebSite","@id":"https:\/\/www.clickcease.com\/blog\/#website","url":"https:\/\/www.clickcease.com\/blog\/","name":"ClickCease Blog","description":"How to protect your ppc campaigns from click fraud.","publisher":{"@id":"https:\/\/www.clickcease.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.clickcease.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.clickcease.com\/blog\/#organization","name":"ClickCease","url":"https:\/\/www.clickcease.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.clickcease.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/clickceaseblog.kinsta.cloud\/wp-content\/uploads\/2019\/02\/cc-logo-black.png","contentUrl":"https:\/\/clickceaseblog.kinsta.cloud\/wp-content\/uploads\/2019\/02\/cc-logo-black.png","width":300,"height":70,"caption":"ClickCease"},"image":{"@id":"https:\/\/www.clickcease.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/ClickCease-484865984976254\/","https:\/\/twitter.com\/clickcease"]},{"@type":"Person","@id":"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/b78aa0c9f82503dd2e1f6ea669e73d2b","name":"Oli Lynch","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/6703777663617e10544867a6e661a11c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6703777663617e10544867a6e661a11c?s=96&d=mm&r=g","caption":"Oli Lynch"},"description":"Since working for ClickCease, Oli has become something of a click fraud nerd, and now bores people at parties with facts about click farms and internet traffic stats. When not writing about ad fraud, he helps companies to optimise their marketing content and strategy with his own content marketing business.","sameAs":["http:\/\/www.olilynch.com\/","https:\/\/www.linkedin.com\/in\/olilynch77\/","https:\/\/twitter.com\/https:\/\/twitter.com\/OliLynchWrites"],"url":"https:\/\/www.clickcease.com\/blog\/author\/oli\/"}]}},"_links":{"self":[{"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/posts\/6085"}],"collection":[{"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/comments?post=6085"}],"version-history":[{"count":4,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/posts\/6085\/revisions"}],"predecessor-version":[{"id":6607,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/posts\/6085\/revisions\/6607"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/media\/6089"}],"wp:attachment":[{"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/media?parent=6085"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/categories?post=6085"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/tags?post=6085"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}