Tracking industry body claims it can audit what thousands of companies do with our personal data.
Here is why that is impossible. #TCF#RTB#adtech iccl.ie/digital-data/i…
Real-Time Bidding (RTB) data broadcasts are impossible to see or audit because they happen behind the scenes between servers.
Unsurprisingly, there is no way to audit what happens to personal data when RTB broadcasts it to thousands of companies, hundreds of billions of times a day. iccl.ie/digital-data/i…
Several researchers revealed that companies send fake TCF signals.
Yet, it is entirely irrelevant whether a CMP fakes TCF signals.
Because even if the TCF operated as intended it could not enforce data protection (security, accountability, etc.)
TCF is a meaningless smoke screen.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Since 2004 Google has moved its ad revenue comes from placing ads on publishers' sites to higher margin ads its own websites and apps. It does this with the benefit of data taken from publishers.
Tracking enables this.
Thanks @jason_kint who highlighted this first.
/3
The UK Government now points to @IABEurope's (the tracking industry body) “consent” spam pop-ups as an example why it needs to abandon the GDPR. We remind @OliverDowden@DCMS that those pop-ups are illegal under the GDPR. bbc.co.uk/news/technolog…
Back in 2017, a year before starting to spam Europe with consent popups, @IABEurope admitted that its tracking and adtech would be “incompatible with consent under GDPR” in a private note to the European Commission. I obtained that note under FOI.
IAB "TCF" consent spam is compliance theatre.
(@mmatthiesen its primary designer says “the most seen — but least read — text on the Internet”)
The UK enforcer could have stepped in to stop this when the UK was in the EU.
It still can. I hope it will under @JCE_PC
We are going to court. Our lawsuit takes aim at Google, Facebook, Amazon, Twitter, Verizon, AT&T and the entire online advertising/tracking industry by challenging industry rules set by IAB TechLab. @ICCLtweet iccl.ie/rtb-june-2021/
The online advertising industry causes the world's biggest data breach. We are going to court to stop it. iccl.ie/rtb-june-2021/
Our evidence includes the “IAB Audience Taxonomy”, the data broker industry rulebook that specifies what can be in companies hidden dossiers about you: Your health problems, your debt... iccl.ie/rtb-june-2021/
Video: a peek inside the system building secret dossiers about you.
Google has announced a big change to its advertising system. That big change raises 4 big questions. iccl.ie/digital-data/4…
It relies on privacy safeguards such as “trusted servers”, isolating data on the person’s device, and targeting groups of people rather than individuals. However, these safeguards are vaguely described. iccl.ie/digital-data/4…
Google said that it would not use unique identifiers in its own ad products. Even so, competition and self-preferencing questions arise. Google will be exposed to competition complaints and litigation if it leaves any room for doubt on any of these three points.
A reminder, ahead of news today, that we alerted the European Commission in October that it could not grant the UK a free data flow "adequacy decision" because of failings of @ICOnews. @ICCLtweet iccl.ie/monitoring-hum…
Problems with the draft: 1. GDPR Article 46(2)a tells the Commission what to consider when granting an adequacy decision. One must be able to take the ICO to court for mistakes. Ask @OpenRightsGroup@jimkillock@RaviNa1k whether this is notional or real. ec.europa.eu/info/sites/inf…
2. GDPR Article 46(2)b tells the European Commission that there must be an "effective[ly] functioning" a supervisory.
Paras 85-98 of the draft decision give a positive review of @ICOnews' performance.
But in fact the ICO failed to act on RTB, the biggest data breach in history.
Data Protection Authority investigation of our complaints finds that the IAB Transparency and Consent Framework infringes the GDPR. iccl.ie/human-rights/i…