Home Data-Driven Thinking The Global Privacy Control Is Limiting. Here’s How The Industry Can Do Better

The Global Privacy Control Is Limiting. Here’s How The Industry Can Do Better

SHARE:
Andy Hepburn, Privacy Lawyer, CIPP/US, Co-founder of NEOLAW

Today, many US state privacy laws either allow or require businesses to enable consumers to opt out of targeted advertising through a technology-enabled feature commonly referred to as a Global Privacy Control (GPC).

In its FAQs, the GPC website states: “GPC … permits users to easily and clearly exercise their privacy rights.”

This statement is true only if a consumer’s sole goal is to completely opt out of all targeted advertising. But what if I prefer to see some targeted ads for products and services that interest me? Does GPC allow me to “easily and clearly” permit some targeting of ads that match my interests, while blocking the rest?

The answer is no. GPC is simply an on/off switch.

As a privacy lawyer, I am interested in what consumers really want from businesses that use their personal information for advertising. I’ve asked many people that question. Their answers indicate online privacy preferences range across a continuum, from restrictive (Don’t use my data for advertising at all”) to permissive (“If I have to see ads at all, they might as well be for stuff I’m interested in”).

This continuum means that to properly serve all consumers, GPCs need to be something more than an on/off switch. There has to be a better way. 

A better approach to privacy

GPCs are necessary because some US laws require businesses to honor them. Plus, there should be an option for consumers to stop all use of personal information for targeted advertising. The best benefit of GPCs is that they bypass the need for a consumer to set their privacy preferences on every website they visit, which is not feasible.

GPCs are insufficient, however, for consumers who prefer to tailor ads to their interests.

To illustrate how consumers might express their interests, I will use a couple of examples: music and performance cars. By tracking my browsing and use of automotive and music sites and apps, marketers can infer a profile of my interests and target ads to me on that basis. If I use GPCs on my browsers, I am opting out of all such tracking. This means that over time I will not receive personalized ads, even if I want to receive them from music and automotive businesses. I do not want this outcome.

Instead of an on/off switch, I want a dimmer. I want to have control over the sharing of my interests with marketers. When I am ready to buy a new car, I want to be able to activate my automotive interest. Once my new car is in my garage, I want the ability to turn it off.

Subscribe

AdExchanger Daily

Get our editors’ roundup delivered to your inbox every weekday.

The problem with GPCs as currently implemented is they do not provide a way for consumers to inform marketers of their interests. Instead, GPCs only allow consumers to opt out of targeted advertising altogether. As a result, consumers who use GPCs will only receive nonpersonalized, often irrelevant ads. A better approach is one that would enable advertisers to deliver relevant ads to consumers for the products and services that interest them.

There is a better solution. A better GPC would offer consumers both:

1. The on/off switch: This setting is for consumers on the ends of the privacy continuum. It would meet the legal requirement for marketers to allow consumers to opt out of targeted advertising altogether.

2. The dimmer switch: For consumers that want tailored ads, this setting provides a way to inform marketers of their interests and receive ads related to those interests.

Examples of this concept already exist, most notably in the Google Topics settings, which allow Google account holders to tailor their interest categories.  

A more nuanced approach

What if GPC provided three options for targeted advertising?

  • PROHIBITED
  • PERMITTED without restrictions
  • PERMITTED BUT LIMITED: Targeted advertising is allowed for expressed interests only. If selected, this would offer a list of topics that relate to a user’s personal interests based on the IAB’s Audience Taxonomy or something similar.

This solution could be implemented as a technology-enabled standard by companies that make browsers, mobile devices and other devices like TV set-top and streaming devices. At most, a consumer would need to go through this selection process once on each browser and device. At best, once a consumer sets preferences, the choice to receive limited personalized advertising would be distributed through the advertising technology ecosystem to all companies that participate in it.

Along with this technical specification, the online advertising industry would have to agree to adhere to standards and rules regarding how to interpret a consumer’s expressed preferences. For example, since I expressed an interest in performance cars, does that mean advertisers of auto detailing services should be able to send me personalized ads? Setting these boundaries appropriately would be critical to building consumer trust in a limited personalized advertising preference.

Now is the time for the digital advertising industry to align around a consumer preference standard that offers nuanced control over the personalized advertising they receive. The GPC is necessary but insufficient. There is a better way if the industry chooses to support it.

Data-Driven Thinking” is written by members of the media community and contains fresh ideas on the digital revolution in media.

Follow NEOLAW and AdExchanger on LinkedIn. 

Must Read

Scott Spencer’s New Startup Wants To Help Users Monetize Their Online Advertising Data

What happens when an ad tech developer partners with a cybersecurity expert to start a new company? You end up with a consumer product that is both a privacy software service and a programmatic advertising ID.

Former FTC commissioner Alvaro Bedoya speaks to AdExchanger Managing Editor Allison Schiff at Programmatic IO NY 2025.

Advertisers Probably Shouldn’t Target Teens At All, Cautions Former FTC Commissioner

Alvaro Bedoya shared his qualms with digital advertising’s more controversial targeting tactics and how kids use gen AI and social media.

Wall Street Turned Against Ad Tech – But May Learn To Love It Again

What can pureplay ad tech companies do to clean up their rep on the Street?

Privacy! Commerce! Connected TV! Read all about it. Subscribe to AdExchanger Newsletters

AppsFlyer and Roku’s New SRN Integration Will Shed Light On CTV Campaign Impact

Roku and AppsFlyer announced the launch of a new self-reporting network (SRN) integration between both companies, which will allow mobile app advertisers to more effectively measure their streaming video campaigns

Comic: Gamechanger (Google lost the DOJ's search antitrust case)

DOJ v. Google: How Judge Brinkema Seems To Be Thinking After Week One

Where the DOJ v. Google ad tech antitrust trial stands after one week’s worth of remedies arguments.

Swish, A Company That's Bringing Programmatic to Product Sampling, Announces Seed Funding

Swish, a startup that partners with retailers to provide product full-size CPG samples to people doing their grocery shopping online, announces $2.3 million in seed funding.