Join us Oct. 15-17 in Phoenix to connect with top media buyers

This article is a WTF explainer, in which we break down media and marketing’s most confusing terms. More from the series →
Pity the privacy compliance officers. This year companies have to adapt to five new state-level privacy laws in the U.S., which means companies’ privacy and legal teams have to figure out how to comply with the various laws and their varying requirements for how people’s personal information can be collected and used for advertising purposes and otherwise.
Fortunately for companies, the Interactive Advertising Bureau has devised a privacy compliance framework called the Multi-State Privacy Agreement that aims to aid compliance across all five state-level privacy laws at once.
“There are disclosures of personal information that happen in the digital advertising supply chain where there are presently no contracts that exist at all, but there need to be contracts going forward,” said IAB evp and general counsel Michael Hahn.
The MSPA — in conjunction with the corresponding Global Privacy Platform — effectively functions as a contract-creating trigger to institute agreements between the companies collecting people’s personal information and the companies that may access that data through the programmatic advertising supply chain.
Sound complicated? It is and it isn’t, as the video below explains.
More in Marketing

Creators fear that cheap, scalable AI talent might soon come for their paychecks
As Meta and OpenAI go all-in on AI content, creators say brands may follow — but authenticity still sells.

AI personas promise speed, but safeguards are needed to avoid leading marketers astray
Lavazza is using AI audience personas to drive its media strategy. The tech shouldn’t be trusted totally, agency execs warn.

Advertising Week Briefing: AWNY distills the industry’s existential drift
For many of the 20,000-plus attending AWNY, this year feels like Q4’s ceremonial kickoff — and pulse check.