‘It’s impossible’: Google has asked ad tech firms to guarantee broad GDPR consent, assume liability
Google has rankled publishers and ad tech firms with its General Data Protection Regulation compliance strategy. But a pledge the company has presented to ad tech firms is considered particularly burdensome.
In the lead-up to the GDPR’s enactment May 25, Google asked ad exchanges and supply-side platforms to guarantee that the publishers whose inventory they help sell have gotten consent across hundreds of vendors for any ads sold through Google’s automated ad-buying platform, DoubleClick Bid Manager, according to three ad tech executives with knowledge of the matter. The EU privacy law requires businesses to justify collecting people’s online data, by getting their consent or through other means.
In signing Google’s consent guarantee agreement, the exchanges and SSPs as well as their respective publishers would assume liability for any corresponding GDPR violations that Google’s DBM is charged with, the execs said. Under the GDPR, any company found violating the law can be fined up to 4 percent of its annual revenue.
Google is asking that the exchanges and SSPs guarantee that their publishers have received consent for each of the roughly 200 vendors on Google’s commonly used vendor list. The ad tech platforms can compromise by creating their own whitelist with a subset of those vendors that they provide to Google, according to the execs. In either case, Google will assume that any exchange or SSP requesting personalized ads from DBM has received consent for all of the vendors on the respective whitelist, the execs said.
The ad tech execs don’t want to assume liability for violations against Google and they don’t think they could honor it in practice. Further, they said Google’s agreement goes against the spirit of the GDPR, which says people have to have the option to withhold consent from individual vendors.
“It’s impossible to get 100 percent consent for every reader for the entire vendor list because most consent management platforms have to, by GDPR law, allow the reader the option to select potentially opting out of specific vendors, and so there’s no way to guarantee 100 percent of readers for 100 percent of the partners or vendors have given consent,” said one of the ad tech execs.
At least one ad tech firm, Sovrn, has declined to sign the agreement. “The changing landscape of GDPR has brought a lot of uncertainty for publishers. Due to the strict requirements around consent in the Google agreement, Sovrn has elected to wait until Google joins the IAB consent framework, which will make it easier for publishers to comply,” Sovrn CTO Jesse Demmel emailed.
“The GDPR is a big change for everyone. We’ve been working hard to make sure that Google complies with its obligations under the GDPR, and to help our partners in their compliance efforts too,” a Google spokesperson said.
The Wall Street Journal reported in May that AppNexus and Teads said they have struck deals with Google to guarantee consent. Reuters earlier this month reported that AppNexus and Rubicon Project have guaranteed to Google that they will only sell inventory to DBM for which publishers have received people’s consent. The articles didn’t say if the agreements were initiated by Google or if the companies and their publishers assumed liability for GDPR violations charged against DBM. Spokespeople for AppNexus and Rubicon Project declined to say if their respective companies signed Google’s agreement and assumed liability. A spokesperson for Teads did not return a request for comment by press time.
If an exchange or SSP declines to sign the agreement, it is limited to only selling non-personalized ads through DBM. Those generic ads generate less revenue for publishers than personalized ads that are targeted to specific audiences based on data collected about them. Some publishers that are heavily reliant on DBM have seen their revenues decline by 70-80 percent since GDPR took effect because they were limited to non-personalized ads, said another ad tech exec. That revenue drop has put pressure on exchanges and SSPs to sign Google’s consent agreement lest their publishers move their inventory to other platforms that can run DBM’s personalized ads on their sites, the second exec said.
Google’s consent guarantee agreement is considered by the ad tech execs to be a stopgap measure until the tech giant adopts the Interactive Advertising Bureau Europe’s and IAB Tech Lab’s GDPR consent framework. Google has said that it plans to complete its integration of the industry framework by August, at which time publishers and ad tech platforms will be able to pass consent to Google on a per-visitor, per-vendor basis.
Member ExclusiveDigiday Research: In the race to comply with digital privacy laws, few sites are making it easy for visitors to opt out of data collection
Just a tiny fraction of websites are giving visitors a choice in how the data collected on them is used.
Member ExclusiveMedia Buying Briefing: WTF are barter agencies?
Barter agencies have always operated on the fringes of the media agency scene. What's changed for them since the pandemic?
Cheat Sheet: Google unveils timeline for a more ‘responsible’ cookie death clock
Google elaborated on its timeline for killing off third-party cookies as part of its promises to the UK's antitrust authority.
SponsoredHow the ad industry can use its borrowed time to future-proof first-party data solutions
Trent Lloyd, co-founder and head of brand solutions, Eyeota Google’s updated timeline for its Privacy Sandbox rollout, including its two-year delay of third-party cookie deprecation on Chrome, didn’t come as a surprise to many industry observers, given the limited utility of Google’s FLoC and the slow momentum of the Privacy Sandbox in the World Wide […]
‘Weak Sauce’: New industry tool for opt-out from email-based tracking misses ID tech and key players like Facebook and Liveramp
The Network Advertising Initiative's new privacy control is intended to stop email-based audience matching — often referred to as onboarding.
How news publishers are using the Olympics and AR to flex their emerging tech storytelling
Big publishers like The Washington Post and USA Today are developing and expanding AR storytelling around the Olympic Games.