The Interactive Advertising Bureau, the association representing online advertisers, has updated and expanded its privacy framework to help members navigate what it calls a patchwork of new state privacy laws related to consent for use of online data for targeted marketing and other purposes. It is seeking public comment on that framework.
The Multi-State Privacy Agreement (MSPA) update, which is currently in draft form, stems from the Limited Service Provider Agreement that covered compliance with the California Consumer Privacy Act (CCPA) and now covers the Colorado Privacy Act (CoPA), Connecticut Data Privacy Act (CDPA), Utah Consumer Privacy Act (UCPA), and Virginia’s Consumer Data Protection Act (VCDPA).
In combination with IAB Tech Lab's Global Privacy Platform (GPP), online advertisers hope to be able to navigate the different consent and privacy regimes. IAB is urging the online advertising industry to adopt the GPP as the go-to privacy management regime.
Also: President Biden Signs New Global Privacy Safe Harbor Order
The IAB said the GPP is meant to enable all parts of the digital ad chain to comply with regional privacy regulations and describes it as a "transport layer that communicates user consent and preference signaling throughout the digital supply chain."
Getting the privacy part of targeted advertising right could be crucial to the continued health of what has been a booming online ad market. Statista.com predicts digital ad spending in the U.S. alone will top $200 billion by 2025.
"We have found a way to solve for key advertising use cases that puts consumers first, hews closely to the letter of the law, and, like the IAB Limited Service Provider Agreement, will be leveraged by small and large participants alike to meet their obligations," IAB/IAB Tech Lab executive VP Michael Hahn said.
While legislators on both sides of the aisle recognize the need for comprehensive privacy protection legislation to replace what will otherwise likely be an even more extensive patchwork of state privacy laws and different data use consent regimes, such legislation has yet to materialize due to differences over what types of data need special protections and how to do that.
IAB is giving commenters until October 27 to weigh in on its proposed framework. ■
