California’s attorney general backs call for Global Privacy Control adoption with fresh enforcement letters to companies
California’s attorney general Rob Bonta is getting tougher on privacy enforcement when it comes to use of a controversial tool enabling universal opt-out from data collection.
AG Bonta’s office confirmed June 14 that companies are required to honor the Global Privacy Control (GPC) tool as a mechanism for people to opt out from data collection under the California Consumer Privacy Act. And enforcement letters sent by his office to several companies this month reinforce that message.
In the past two weeks, the AG’s office sent at least 10 and possibly more than 20 companies letters that call on them to honor the GPC, according to four lawyers with clients in the digital publishing and advertising industry.
“We all have clients who got some [letters],” said Alysa Hutnik, partner and chair of the privacy and security practice at law firm Kelley Drye and Warren, speaking on behalf of a small group of lawyers she communicates with regarding privacy regulations.
“[The letters] are implying that companies must follow the GPC signal,” said another lawyer who spoke on condition of anonymity. Despite previous doubt among some ad firms, some of the new letters make it clear that the use of data passed among third-parties for behavioral advertising is indeed a data sale under the CCPA in the eyes of the state’s attorney general, according to the lawyers.
A spokesperson for AG Bonta’s office declined to confirm that the letters were sent, but told Digiday, “Enforcement of the CCPA hit its one-year anniversary in July and enforcement continues on a regular basis.”
“Under law, [GPC] must be honored by covered businesses as a valid consumer request to stop the sale of personal information,” stated a July 14 update to CCPA-related frequently asked questions on California’s Department of Justice website.
GPC is a browser-based opt-out tool that automatically sends out a signal requesting websites and ad tech intermediaries to opt-out from selling people’s data. People using Brave and DuckDuckGo’s Privacy Essentials browser extension have the GPC setting turned on by default, for example.
“At least 50 million people” worldwide are sending out the GPC signal today, up from around 40 million when the tool was launched in October, said Ashkan Soltani, a privacy researcher who helped launch the GPC program.
However, support of GPC is limited to “privacy-preserving browsers and tools,” Soltani said. He added, “A lot of the browser vendors are reluctant to engage in enabling it.” For instance, some browsers that incorporate other privacy-protective features, including Apple’s Safari, haven’t gotten on board with GPC. Meanwhile, without Google’s Chrome — the world’s most popular browser — in the mix, GPC may not make much of a dent in limiting data collection
That means GPC doesn’t necessarily pose a threat to publishers when it comes to how they gather data, said Don Marti, vp of ecosystem innovation at ad management firm CafeMedia, an early adopter of the tool on behalf of its publisher partners. Because “none of the major browsers have turned it on,” Marti said GPC has little impact on publishers’ ability to gather data that helps generate ad revenue.
Other publishers including The New York Times and The Washington Post signed on to honor the tool when it launched, and Soltani said he’s spotted several small publishers recognizing the GPC signal over the past few months.
Confusion remains without technical standards
In the absence of technical specifications from the AG’s office for how companies should honor global privacy opt-out signals, companies remain somewhat confused, said Hutnik. “There’s no technical standard for it,” she said. For that reason, companies are reluctant to invest in possibly costly technical fixes. Just how expensive implementation of changes are to acknowledge GPC signals seems to vary from publisher to publisher.
“My clients want to comply with the law,” said Hutnik. “But it requires a lot of money and investment, and if you’re interpreting it wrong and you have to do a 180, it’s not a good use of resources or good for consumers. It’s confusing.”
The connector: How UTA’s gaming boss is reconciling discrepancies between the attention games attract and the revenue they make
If you’re into gaming then chances are you’ve come across Ophir Lupu’s work.
Why Fiverr believes it’s finally time to bring back OOH advertising next year
After the delta variant brought more uncertainty to the pandemic, Fiverr is reconsidering its 2022 media mix.
The Rundown: How up-and-coming esports organizations are separating themselves from the pack
Marketers should look to partner with esports organizations competing in newer or smaller esports that boast loyal and growing communities.
SponsoredHow advertisers are shifting mindsets to succeed amid iOS 15 and other identity challenges
On top of the impending cookie deprecation, Apple’s recent iOS 15 changes are causing concern for many advertisers by affecting pixels, IP addresses and email addresses. While these upcoming changes may be concerning for many, shifting mindsets and getting away from a binary way of thinking with solutions being 100% contextual or 100% universal IDs […]
Member ExclusiveMarketing Briefing: Marketers are eyeing in-housing once again with 44% of CMOs planning to move more work in-house in 2022
Procter & Gamble is an early mover -- as to be expected from the largest advertiser in the business -- but it’s not alone in continuing to move various marketing capabilities in-house despite the pandemic. According to a new Forrester report, 77% of global organizations now have some form of in-house agency; that’s up from 68% in 2018.
As hiring in the metaverse ramps up, experts caution against working with snake oil salesmen
Companies of all shapes and sizes are queuing up to hire what are quickly becoming the most in-demand roles in media and advertising. Ever since Facebook CEO Mark Zuckerberg announced earlier this year that the future of his company would be in the metaverse, the word has slowly become part of mainstream parlance.