GDPR is coming, but nobody knows how it will be enforced
The deadline for Europe’s sweeping reforms to data protection is looming, but many marketers are still none the wiser on how those rules will be enforced.
The General Data Protection Regulation may be a universal law for the European Union, but that doesn’t mean it will be applied equally. After all, 28 different countries will handle enforcement. That means Germany, for example, is expected to be tougher on enforcement of GDPR than elsewhere on the continent given data protection is conducted at a state level. Conversely, the U.K. has traditionally been the member state to push back against any overtly data-privacy regime that could impede global trade.
The cross-border differences have left some companies confused as to what to do; some are considering country-specific strategies, while others like AppNexus mull a strategy for Europe as a whole. That there is still such trepidation over how GDPR will be enforced in eight months is emblematic of its ambiguities.
“When it comes to how the law is going to be enforced on foreign companies we are still awaiting guidance [from regulators],”said Nathalie Moreno, a partner at law firm Lewis Silkin. “I’m often asked how the regulators are going to enforce it, and my guidance is that there are some data-protection authorities that have a culture of fining and will continue to do so, while there are others that have more of a business-friendly approach, and they will carry on enforcing in that way.”
The issue came up at a Direct Marketing Association event last week and was also raised weeks before at Dmexco, as the industry tries to spot the gap between the letter and spirit of the law. Executives at both events were worried that enforcement of the GDPR will be superficial if its regulators don’t have the resources to detect most offenders.
“We think because they [regulators] don’t have more staff to deal fairly [with each case], they will [target] symbolic cases, and some of that enforcement may be arbitrary and unfair,” said Townsend Feehan, CEO of IAB Europe, at Dmexco.
One advertising executive recently met with several senior marketers from big brands to discuss GDPR and said the “big shock” to them wasn’t the hefty fines imposed by regulators if they broke the law; it was the damages they could suffer from class action suits.
The Information Commissioner’s Officer in the U.K. plans to recruit 200 additional staff to take its total number to around 700 over the next three years. The regulator is already working with the British advertisers’ trade body ISBA to clarify ambiguities in the GDPR that have left many brands unsure of how it will be enforced. Seven in 10 companies do not feel marketers in their organization are fully aware of the extent of the GDPR, and just 65 percent expect to be fully compliant when it comes into force next May.
Discussions at the DMA’s event backed the findings, with some attendees debating between sessions as to whether data watchdogs could properly enforce the regulation outside of the EU. One visitor mused that companies would move personal information to servers in regions like Latin America, where they believe it would be difficult for the organizations like the ICO to enforce.
How Facebook’s brand safety audit with the Media Rating Council will work
The MRC audit will determine whether Facebook has applied an advertising adjacency standard into its brand safety protections.
Member Exclusive‘Are you going to put people over profit?’: As Facebook boycott continues, DTCs still running ads on the platform in a tricky spot
The Facebook boycott is part of a larger cultural shift towards a more “values-based consumerism.”
‘Influencer deals are being paused’: As Facebook boycott begins in earnest, influencer marketing feels a sting
The latest move to pause influencer marketing comes as marketers are not only reconsidering where their ads appear and the kind of content they appear next to, but as they work to figure out how they can better support Black creators and Black-owned businesses following the Black Lives Matter (BLM) protests.
SponsoredWhy data clean rooms are a start, but not enough
Clean rooms are intended to be a “safe space” for brands to collaborate with walled gardens, but the greater opportunity for all brands is bringing together all of their data to create a single source of truth that they own and can continually enrich.
As Facebook boycott continues, here’s a look at what major marketers were spending on Facebook and Instagram
To get a sense of how much advertisers are pulling back from Facebook, Digiday reached out to ad-tracking firm Pathmatics. The company provided estimates for how much advertisers spent on the platform during July 2019 as well as from July 2019 to 2020.
Member Exclusive‘Performative posting’: As agencies share their equality values online, staffers say they have to do much more for Black employees than post
Agency employees and execs say agencies need to do more than make statements to be better for Black employees.