W3C Attribution API prompts debate over the future of web measurement

By Ronan Shields • July 21, 2026 •

Ivy Liu

The World Wide Web Consortium’s proposed Attribution API has entered one of the most significant phases of its development, with the specification now open to broader industry review as industry stakeholders weigh its implications for privacy-preserving advertising measurement.

The web standards body, more commonly known as W3C, has been incubating the proposal within its Private Advertising Technology, or “PAT,” working group with input from representatives of major web browser providers, such as Apple, Google, Microsoft, and Mozilla.

Similarities to Sandbox?

The proposal aims to provide a browser-based mechanism for measuring advertising performance without relying on cross-site tracking. The latest draft, published earlier this month, marks the beginning of a wider review process intended to solicit feedback from organizations beyond the working group before the specification advances further through the W3C standards process.

The review comes less than a year after Google scaled back much of its Privacy Sandbox initiative, including its Attribution Reporting API, while continuing to support attribution work within the W3C. However, for some, the current proposal represents an evolution of ideas first mooted within Privacy Sandbox, albeit now they operate under a different governance model.

Others involved in the standards process reject this notion, arguing the work predates Privacy Sandbox, maintaining that contributions from multiple browser vendors and other industry participants — plus the fact that its development remains subject to the W3C’s consensus-driven standards process — indicate a more collegial approach.

As a result, the discussion has expanded beyond the technical specification itself, encompassing broader questions about governance, industry participation, and who should ultimately shape the future of advertising measurement on the open web.

Competition concerns

Among those raising questions is Don Marti, an industry consultant who argues the current proposal shares significant architectural similarities with Google’s earlier Attribution Reporting API — originally developed under commitments made to the U.K.’s Competition and Markets Authority — and harbors concerns as such attribution discussions increasingly move through the W3C standards process.

Meanwhile, James Rosewell, co-founder of industry pressure group Movement for an Open Web, or MOW, told Digiday that several elements of the proposal deserve greater industry scrutiny, asserting that browser-mediated attribution could concentrate too much influence over measurement within browser platforms. Additionally, he raised concerns about the complexity of the proposed aggregation model, arguing that the potential impact of such architectural decisions could affect competition and innovation across the advertising ecosystem.

While MOW acknowledges the utility of privacy-preserving measurement, its representatives maintain that decisions about how advertising is measured should reflect a broader business discussion involving advertisers, publishers, agencies, independent measurement providers, browser vendors, and technical standards experts.

A different PoV

Others participating in the standards effort see the proposal very differently.

Scott Messer, an industry consultant with knowledge of such discussions, told Digiday the industry’s ability to measure advertising remains fundamental to maintaining investment in the open web. “Generally speaking, attribution on the open web is good,” he said. “We need to figure out how media gets spent and how it gets credited back… the unlocking of measurement drives spend.”

He also cautioned against suggestions that the proposal primarily benefits the largest technology platforms. “It might be a stretch,” he said, adding that the work is “definitely like an open web thing” and represents “another tool in their attribution toolset.”

Meanwhile, Aram Zucker-Scharff, a software development engineer at The Washington Post and co-chair of W3C’s PAT working group, likewise maintained that suggestions that the Attribution API should be viewed as a continuation of Privacy Sandbox.

“The process started before Privacy Sandbox,” he said, describing the work as “part of a continuous set of proposals that were not started nor did they end with Privacy Sandbox.”

Zucker-Scharff urged wider participation from those outside of the W3C; he added, “Everything that the group does… is in public… Nobody’s trying to hide anything or do anything in secret.”

Supporters also point to the W3C’s standards process itself, noting that the current wide review is specifically intended to invite technical and industry feedback before any recommendation is finalized. From their perspective, the publication of the latest working draft should be seen as an opportunity to broaden participation in the proposed developments.

The differing perspectives reflect a wider debate that has emerged as digital advertising adapts to stronger privacy expectations and the decline of traditional cross-site identifiers. While there is broad agreement that privacy-preserving measurement is necessary, there is less consensus about where measurement should occur, how much responsibility browsers should assume, and how those decisions should be governed over the long term.

As the Attribution API continues to evolve, the discussion surrounding it is increasingly about governance and industry participation as much as the technical details of the specification.