Very good panel from all sides (academic, regulator, marketer, consumer, ad tech trade body) of GDPR as it continues to deploy in E.U. A few thoughts.../1
I think I found common ground between consumer mindset (represented by privacy-innovator Brave browser) and adtech trade body (IAB) in that both agree on need for specificity and strong purpose limitations which haven’t and still don’t exist across ad tech. A thought from me.../2
I find a clear fear being Google & Facebook can work around GDPR constraints exaggerating its 1st party status & bundling consent under overly broad *purposes.* Would it be useful if IAB did a public compliance check on FB & Google’s data collection and use for proper consent? /3
This IAB slide is mostly right but rich with its previously misleading fear campaigns to fight privacy laws by suggesting behavioral ads fuel entire web and our services will go away. This was Google, Facebook and adtech complex propaganda since they depend on tracking. /4 
When one points to “scale of logged-in users” for google and Facebook, you’re not making a valid point against privacy law. You’re making point in favor of risk-based approaches, purpose limitations (Facebook would violate IMHO) and antitrust consideration of data practices. /5
Lastly, strong point by @fborgesius on need for the simple, elegant and persistent Do Not Track signal to remain in ePrivacy law which is consistent with CCPA law in California and @AGBecerra draft regs. It eliminates friction for users and frustrating consent fatigue. /end
