WTF is the IAB’s Multi-State Privacy Agreement?

This article is a WTF explainer, in which we break down media and marketing’s most confusing terms. More from the series →

Pity the privacy compliance officers. This year companies have to adapt to  five new state-level privacy laws in the U.S., which means companies’ privacy and legal teams have to figure out how to comply with the various laws and their varying requirements for how people’s personal information can be collected and used for advertising purposes and otherwise.

Fortunately for companies, the Interactive Advertising Bureau has devised a privacy compliance framework called the Multi-State Privacy Agreement that aims to aid compliance across all five state-level privacy laws at once. 

“There are disclosures of personal information that happen in the digital advertising supply chain where there are presently no contracts that exist at all, but there need to be contracts going forward,” said IAB evp and general counsel Michael Hahn.

The MSPA — in conjunction with the corresponding Global Privacy Platform — effectively functions as a contract-creating trigger to institute agreements between the companies collecting people’s personal information and the companies that may access that data through the programmatic advertising supply chain. 

Sound complicated? It is and it isn’t, as the video below explains.

More in Marketing

The official judgmental map of Cannes Lions 2026

This map won’t tell you where to go during Cannes Lions. It will tell you where you actually are.

The definitive Digiday guide to what’s in and out at Cannes 2026

Here’s what’s in and out for the Cannes Lions International Festival of Creativity.

As AI reshapes search, TikTok turns discovery into a performance pitch

The platform argues rising search activity is evidence that discovery is increasingly driving performance outcomes advertisers expect.