Today @Brave wrote to @IAB @IABTechLab to provide feedback on the OpenRTB 3.0 #adtech spec. It appears to severely infringe Article 5 of the #GDPR 1/ brave.com/iab-rtb-proble…
Our letter contains a summary of the various personal data that are broadcast in the OpenRTB system. Note that these data are very likely to include “special categories” of personal data, since they show what the person is watching and reading, can include brokers’ segment IDs 2/ 
Unless OpenRTB 3.0 is very radically altered, so that no personal data are contained in the bid request, it appears that it will severely infringe Article 5 of the #GDPR, and all that flows from Article 5’s principles. 3/
This will put at risk the fundamental rights of virtually every person that uses the Internet in Europe. These are enshrined in and protected by the Charter of Fundamental Rights of the European Union. Marketers, vendors, and publishers will be exposed to acute legal hazard. 4/
Here is a sample of the personal data that are broadcast in RTB "bid requests" to ad tech companies, every time you load a page on a website.
OpenRTB (behavioural) advertising is a data protection free zone that broadcasts details of what every person reads or watches to a large number of companies. This is continuous. It happens on virtually every website, every single time a person loads a page.
