Page Comparison

...

Discussion Items

Introductions

Rupert Graves
- AdUnity - programmatic digital advertising agency
- Preparing for GDPR - keen to get standards established in time for May 2018
Rachel O'Connell
- Trust Elevate - Trust services consultancy
- Author of BSI standard of age-related attribute verification
  - Working on Parental relationship - to meet the GDPR requirement for Verified Parental Consent
David Clarke
- Working with others here on GDPR

Purpose Category Document Draft Discussion

Mark gave an overview of the document
Seeking to define a kind of code table or taxonomy to describe Purpose categories and sub-categories
Q: Is there currently an industry practice or standard for these purposes? A: No - typically too broadly stated
Rupert: the drafted list from CR spec is pretty good
Rachel: need to add age-related marketing purposes
The question of "Legitimate Interest"
- Under GDPR, Direct Marketing does have a legitimate interest for use of PII
- For Targeted Marketing, it implies that consent is required.
- Rupert sees that these points lie on a spectrum
  - Believes that most orgs will end up using consent, even though there may be a case to be made to use 'legitimate interest'
- David - this is intertwined with the PECR (Privacy in electronic communication Regulation) - there have been surprises - http://www.legislation.gov.uk/uksi/2003/2426/contents/made
Advertising Fraud
- in US the Digital Advertisers Alliance have a code of practice and definitions
  - they have defined 'Ad Delivery' - counting and fraud monitoring - a specific carve-out
  - For GDPR this carve out is not valid
- There's a copy-paste European Digital Advertisers Alliance - same carve-out