Johnny Ryan Profile picture
Jan 20 4 tweets 2 min read
Tracking industry body claims it can audit what thousands of companies do with our personal data.
Here is why that is impossible.
#TCF #RTB #adtech
iccl.ie/digital-data/i…
Real-Time Bidding (RTB) data broadcasts are impossible to see or audit because they happen behind the scenes between servers.
Unsurprisingly, there is no way to audit what happens to personal data when RTB broadcasts it to thousands of companies, hundreds of billions of times a day.
iccl.ie/digital-data/i…
Several researchers revealed that companies send fake TCF signals.
Yet, it is entirely irrelevant whether a CMP fakes TCF signals.
Because even if the TCF operated as intended it could not enforce data protection (security, accountability, etc.)
TCF is a meaningless smoke screen.

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Johnny Ryan

Johnny Ryan Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @johnnyryan

Oct 22, 2021
New data: tracking-based ads imperil rights & publisher sustainability.
They divert data & revenue from publishers (and cause disinformation, fraud, dangerous data leakage).
@paultang @AlexandraGeese @BirgitSippelMEP @echo_pbreyer @kimvsparrentak @woelken iccl.ie/digital-data/s…
@paultang @AlexandraGeese @BirgitSippelMEP @echo_pbreyer @kimvsparrentak @woelken Tracking-based ads siphon publishers’ audience data to Google & Facebook.
(Publishers, read Google's terms carefully policies.google.com/technologies/p…) /2
Since 2004 Google has moved its ad revenue comes from placing ads on publishers' sites to higher margin ads its own websites and apps. It does this with the benefit of data taken from publishers.
Tracking enables this.
Thanks @jason_kint who highlighted this first.
/3
Read 12 tweets
Aug 27, 2021
The UK Government now points to @IABEurope's (the tracking industry body) “consent” spam pop-ups as an example why it needs to abandon the GDPR. We remind @OliverDowden @DCMS that those pop-ups are illegal under the GDPR. bbc.co.uk/news/technolog…
Back in 2017, a year before starting to spam Europe with consent popups, @IABEurope admitted that its tracking and adtech would be “incompatible with consent under GDPR” in a private note to the European Commission. I obtained that note under FOI.
IAB "TCF" consent spam is compliance theatre.
(@mmatthiesen its primary designer says “the most seen — but least read — text on the Internet”)
The UK enforcer could have stepped in to stop this when the UK was in the EU.
It still can. I hope it will under @JCE_PC
Read 10 tweets
Jun 16, 2021
We are going to court. Our lawsuit takes aim at Google, Facebook, Amazon, Twitter, Verizon, AT&T and the entire online advertising/tracking industry by challenging industry rules set by IAB TechLab. ⁦@ICCLtweeticcl.ie/rtb-june-2021/
The online advertising industry causes the world's biggest data breach. We are going to court to stop it. iccl.ie/rtb-june-2021/
Our evidence includes the “IAB Audience Taxonomy”, the data broker industry rulebook that specifies what can be in companies hidden dossiers about you: Your health problems, your debt...
iccl.ie/rtb-june-2021/
Video: a peek inside the system building secret dossiers about you.
Read 9 tweets
Mar 9, 2021
Google has announced a big change to its advertising system. That big change raises 4 big questions. iccl.ie/digital-data/4…
It relies on privacy safeguards such as “trusted servers”, isolating data on the person’s device, and targeting groups of people rather than individuals. However, these safeguards are vaguely described. iccl.ie/digital-data/4…
Google said that it would not use unique identifiers in its own ad products. Even so, competition and self-preferencing questions arise. Google will be exposed to competition complaints and litigation if it leaves any room for doubt on any of these three points.
Read 7 tweets
Feb 19, 2021
A reminder, ahead of news today, that we alerted the European Commission in October that it could not grant the UK a free data flow "adequacy decision" because of failings of @ICOnews.
@ICCLtweet
iccl.ie/monitoring-hum…
Problems with the draft:
1. GDPR Article 46(2)a tells the Commission what to consider when granting an adequacy decision. One must be able to take the ICO to court for mistakes. Ask @OpenRightsGroup @jimkillock @RaviNa1k whether this is notional or real.
ec.europa.eu/info/sites/inf… ImageImageImage
2. GDPR Article 46(2)b tells the European Commission that there must be an "effective[ly] functioning" a supervisory.
Paras 85-98 of the draft decision give a positive review of @ICOnews' performance.
But in fact the ICO failed to act on RTB, the biggest data breach in history.
Read 7 tweets
Oct 16, 2020
Data Protection Authority investigation of our complaints finds that the IAB Transparency and Consent Framework infringes the GDPR.
iccl.ie/human-rights/i…
Read 15 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us on Twitter!

:(