• Marketing Land
  • Sections
    • CMO
    • Social
    • SEM
    • SEO
    • Analytics
    • Display
    • Retail
    • MarTech
    • Resources
    • More
    • Home
  • Marketing Land
  • CMO
  • Social
  • SEM
  • SEO
  • Analytics
  • Display
  • Retail
  • MarTech
  • Resources
  • More
  • SUBSCRIBE

Marketing Land

Marketing Land
  • CMO
  • Social
  • SEM
  • SEO
  • Analytics
  • Display
  • Retail
  • MarTech
  • Resources
  • More
  • Home
  • Newsletters
  • Home
Martech: Analytics & Data

Complaint alleges that Google is circumventing GDPR with RTB personal data sharing

Brave's Dr. Johnny Ryan argues Google is enabling non-consensual data transfers with "hidden push pages."

Greg Sterling on September 4, 2019 at 12:33 pm
  • More

A year ago, Brave’s Chief Policy Officer Dr. Johnny Ryan filed a complaint against Google before the Irish Data Protection Commission (DPC). Calling it a “massive data breach,” the complaint alleged that Google’s programmatic platform, Authorized Buyers (formerly DoubleClick Ad Exchange), improperly and routinely exposes personal data in violation of the EU’s General Data Protection Regulation (GDPR).

The complaint is not simply aimed at Google, it’s an indictment of the entire RTB/programmatic ecosystem as presently operated in Europe.

Alleged GDPR workaround. New evidence presented by Brave to the Irish DPC claims to be a “smoking gun” of sorts. Ryan and Brave ague that Google uses a “a surreptitious mechanism” to share personal data with third parties as a “GDPR workaround that circumvents Google’s own publicly stated GDPR data safeguards.”

This discovery was based on research (pdf) conducted by Brave and a third party, analyzing Ryan’s own browsing behavior on Chrome. “Analysis of the network log shows that [Ryan’s] personal data has been processed in Google’s Authorized Buyers RTB system. It further shows that Google has also facilitated the sharing of personal data about the Data Subject between other companies.”

‘Push pages’ allow data matching. Brave labels this data-sharing mechanism “Push Pages,” which are generated to log browsing behavior for the purpose of sharing it with third parties, according to Brave, and are unique to individuals. These are “hidden pages,” hosted by Google, that share identifiers with third parties when a page is loaded. This permits matching of browsing data with third-party data and “allows companies to pseudonymously identify the person in circumstances where this would not otherwise be possible.”

Ryan and Brave assert these “hidden” push pages allow for extensive and personalized data sharing to happen among hundreds and even thousands of companies participating in the auction. Under the framework of GDPR, Ryan argues this is a “data breach” or “leakage” of potentially sensitive personal data (i.e., location, political views, religion, health conditions, etc.) that can be used to identify an individual.

In the U.S. all this would be perfectly legal. But under GDPR, as alleged, it is not.

In response to the allegations Google spokesperson said, “We do not serve personalised ads or send bid requests to bidders without user consent. The Irish DPC — as Google’s lead DPA — and the UK ICO are already looking into real time bidding in order to assess its compliance with GDPR. We welcome that work and are co-operating in full.”

Why we should care. Ryan argues that RTB must “reform” and that the Irish investigation and investigations in other EU countries will force major changes in the way the programmatic ecosystem works. What that potentially means is an end to any and all non-consensual data sharing. Ryan’s position is that everyone participating in RTB (publishers, advertisers, martech) is now subject to potential liability under GDPR.

In the U.S. none of this applies. However, what happens in Europe is and will be influential in shaping the privacy debate and U.S. policy going forward.


Opinions expressed in this article are those of the guest author and not necessarily Marketing Land. Staff authors are listed here.



About The Author

Greg Sterling
Greg Sterling is a Contributing Editor to Search Engine Land, a member of the programming team for SMX events and the VP, Market Insights at Uberall.

Related Topics

Channel: Martech: Analytics & DataGDPR - General Data Protection RegulationGoogleGoogle: PrivacyLegal

We're listening.

Have something to say about this article? Share it with us on Facebook, Twitter or our LinkedIn Group.

Get the daily newsletter digital marketers rely on.
See terms.

ATTEND OUR EVENTS

MarTech 2021: March 16-17

MarTech 2021: Sept. 14-15

MarTech 2020: Watch On-Demand

×

Attend MarTech - Click Here


Learn More About Our MarTech Events

April 13, 2021: SMX Create

May 18-19, 2021: SMX London

June 8-9, 2021: SMX Paris

June 15-16, 2021: SMX Advanced

August 17, 2021: SMX Convert

November 9-10, 2021: SMX Next

October 2021: SMX Advanced Europe

December 14, 2021: SMX Code

Available On-Demand: SMX

Available On-Demand: SMX Report

×


Learn More About Our SMX Events

White Papers

  • The Media-First Approach Why visual media must be a primary consideration for e-commerce businesses
  • Visual Experiences That Connect: A look at the power of UGC and the tech needed to support it
  • Become an Experience-Led Business with an Agile CX Tech Stack
  • Transformational CX: Video-Powered Experiences Meet Consumers’ Demands
  • What Customer Experience Means in 2021
See More Whitepapers

Webinars

  • The AI Revolution Is Coming to Every Stage of Your Buyer’s Journey
  • The Fundamentals of Link Building for E-Commerce & Affiliate Sites in 2021
  • Your Customer is Calling: Make the Most of Your Marketing Spend with Call Tracking
See More Webinars

Research Reports

  • Local Marketing Solutions for Multi-Location Businesses
  • Enterprise Digital Asset Management Platforms
  • Identity Resolution Platforms
  • Customer Data Platforms
  • B2B Marketing Automation Platforms
  • Call Analytics Platforms
See More Research

Attend SMX For Only $99

h
Receive daily marketing news & analysis.

Channels

  • MarTech
  • CMO
  • Social
  • SEM
  • SEO
  • Mobile
  • Analytics
  • Retail
  • Display

Our Events

  • MarTech
  • SMX

Resources

  • White Papers
  • Research
  • Webinars

About

  • About Us
  • Contact
  • Privacy
  • Marketing Opportunities
  • Staff

Follow Us

  • Facebook
  • Twitter
  • LinkedIn
  • Newsletters
  • RSS
  • Youtube

© 2021 Third Door Media, Inc. All rights reserved.