What publishers should know about the new EU data laws
The European Commission passed a new law Thursday after four years of discussion. While the law gives European citizens more control over what happens to their data, it also means headaches for publishers and advertisers, who are increasingly relying on data for ad targeting.
Under the General Data Protection Regulation (GDPR), all companies will be required to gain consent from individuals before collecting their data. Users will be notified that the company wants to use their data and what they want to use it for. They will be told that they have the right to refuse parting with their personal information.
The new laws will go into effect in 2018, and companies that fail to comply will face eye-watering fines of €20 million ($28.4 million) or up to 4 percent of global revenues.
The Association of Online Publisher (AOP) led a forum, chaired by Nick Stringer, former head of public policy at the IAB U.K. on what the new data rules means for publishers. Hearst, Time Inc., The BBC, Dennis, Telegraph, ESI Media, The Guardian and Condé Nast were all on hand. Many in the room in London’s Courthouse Hotel were just taking the first steps toward understanding the minutiae of the law.
Simon Morrissey, partner at law firm Lewis Silkin, provided some comfort to the publishers who were in attendance. “If you’re complying with current guidance, you’re in a pretty good place,” he said. Morrissey and others urged publishers to understand what data they already have and keep up to speed with national data protection body, in the U.K. the Information Commissioner’s Office (ICO).
Here are some other key takeaways for publishers:
Publishers could block content from people who don’t give up their data
Geoff Richards, head of data analytics and insight at Condé Nast, asked the experts whether there’s limitation on what leverage a publisher could give should users refuse to part with data. “Can I say, ‘Sorry you can’t view my website if you don’t agree’?”
While Morrissey said that consent must be freely given, not coerced, this wasn’t a breach of the rules. “But I would say that it wouldn’t make business sense.” Instead he suggested offering a tiered approach, a light service for less valuable data, so as to be “pro-actively encouraging the data exchange.”
“This will be an area of dispute — the freedom of choice versus getting things your want,” added Iain Bourne, group manager at the ICO.
Companies need historic consent
Not only will publishers need to get permission from readers starting in 2018, but companies will need to get renewed permission from people they already have profiles on.
“Don’t fear it,” said Morrissey. “Re-permissioning is a good thing; it’s how you do it. The best execution I’ve seen is by Lords MCC [Marylebone Cricket Club]. It’s very granular, and goes down to a lot of detail.” Privacy notices must be concise, transparent, intelligible, easily accessible and in plain language, he said.
This has international jurisdiction
It may be a European law but it has global impact, said Bourne. “It’s who you are processing data on, not where you are situated,” he added.
“If companies are funnelling any activity into Europe aimed at monitoring European residents, they are caught by these regulations,” said Morrissey, explaining that Google, Facebook and other corporations won’t be immune. However, if the U.K. leaves the European Union, then the law will still apply to British publishers. They’ll only have little to no influence on how the laws are interpreted or enforced.
Expect more publisher co-ops
Dominic Perkins, commercial development director at Time Inc., asked if it makes more sense for publishers to create data co-ops, creating a single identifier in order to be more transparent, and sharing that among them.
Probably, answered Yves Schwarzbart, acting head of policy and regulatory affairs at the IAB U.K. “Simplifying the data processes is in everyone’s interests,” he said. “It needs to start with someone.”
Media Briefing: Publisher execs fear lack of visibility for Q3, but feel steady year over year
Publisher execs share how Q2 shook out for their businesses as they brace for an equally murky second half.
Digiday+ Research: Nearly two-thirds of publishers think they will lose when the third-party cookie dies
Publishers have been busy prepping for the end of the third-party cookie, but that doesn't mean they think they'll come out on top in the post-cookie era. In fact, publishers count themselves among those who stand to lose from the end of the cookie.
Spotify cancels six true crime podcasts amid layoffs, Gimlet-Parcast merger
Spotify is canceling six shows and laying off 200 people as it merges its Gimlet and Parcast units to push its podcast business towards profitability.
SponsoredWhat the measurement and currency discussion really means to TV advertisers
Ali Mack, head of TV and agency, Experian Major streaming video providers have recently made headlines by adopting new currencies for ad measurement, threatening Nielsen’s long-standing TV ratings monopoly. NBCUniversal, for example, has certified iSpot and VideoAmp as currencies for advanced audiences and formed the Joint Industry Committee with Paramount, TelevisaUnivision and Warner Bros. Discovery. […]
As AI spreads across the marketing landscape, data’s role will be key to success or danger
There’s a growing awareness of the risks inherent in AI's ultra-powerful potential, but whether enough steps are being taken to mitigate them remains a huge question mark.
‘Not the future’: European publishers remain steadfast in blocking alternative IDs to third-party cookies
Some European publishers believe alternatives to the third-party cookies, probabilistic or deterministic, will do more harm than good to their ads businesses.