
This article is a WTF explainer, in which we break down media and marketing’s most confusing terms. More from the series →
Pity the privacy compliance officers. This year companies have to adapt to five new state-level privacy laws in the U.S., which means companies’ privacy and legal teams have to figure out how to comply with the various laws and their varying requirements for how people’s personal information can be collected and used for advertising purposes and otherwise.
Fortunately for companies, the Interactive Advertising Bureau has devised a privacy compliance framework called the Multi-State Privacy Agreement that aims to aid compliance across all five state-level privacy laws at once.
“There are disclosures of personal information that happen in the digital advertising supply chain where there are presently no contracts that exist at all, but there need to be contracts going forward,” said IAB evp and general counsel Michael Hahn.
The MSPA — in conjunction with the corresponding Global Privacy Platform — effectively functions as a contract-creating trigger to institute agreements between the companies collecting people’s personal information and the companies that may access that data through the programmatic advertising supply chain.
Sound complicated? It is and it isn’t, as the video below explains.
More in Marketing

While client climate commitments waver, some media agencies are doubling down
Agencies hope B Corp status is still an effective calling card, but momentum among brands is turning due to a changed political climate.

‘Gag orders all around’: Confessions of a comms professional on DEI backlash
DEI backlash puts ‘gag order’ on communication professional clients.

Marketing Briefing: ‘High risk, high reward’ — Understanding the state of social media guardrails
The desire to crack the code of successful social marketing is something that often allows social media managers and strategists a bit more creative freedom — a necessity for a brand to truly find a way to break through.