Home Privacy Privacy Compliance Is At The Top Of The Tech Lab’s 2024 To-Do List

Privacy Compliance Is At The Top Of The Tech Lab’s 2024 To-Do List

Comic: State Privacy Law Lab

The days of online ad industry self-regulation are well and truly over.

“It’s time to accept that we are a globally regulated industry, much like finance, energy and health care,” said IAB Tech Lab CEO Tony Katsur, speaking at a Tech Lab event about signal loss in New York City on Thursday.

In 2023 alone, seven US states passed their own comprehensive data privacy laws, and today there are 14 state privacy laws on the books in the US.

It’s time – or rather past due – to start prioritizing compliance.

State of play

Five US state privacy laws are already in effect: California, Colorado, Connecticut, Utah and Virginia. Three others will become enforceable later this year: Oregon and Texas in July and Montana in October.

Meanwhile, Delaware, Iowa, New Jersey, New Hampshire and Tennessee will hit next year, followed by Indiana in 2026.

There are also 18 states with active bills in the works, not all of which will end up getting signed into law. But you can bet your boots that some of them will, which means the US might have nearly 20 state privacy laws, all with their own nuances, in the relatively near future.

A compliance state of mind

Beyond guaranteeing job security for privacy lawyers and other privacy professionals, this veritable tsunami of data privacy laws is spurring a lot of activity within Tech Lab working groups.

Developing technical standards and frameworks for privacy compliance is a Tech Lab priority, Katsur said.


AdExchanger Daily

Get our editors’ roundup delivered to your inbox every weekday.

The three biggies are the Tech Lab’s Data Deletion Request Framework, the Accountability Platform and the Global Privacy Platform (GPP).

The GPP launched back in 2022. In a mixture of English and jargonese, it’s an API for transmitting choice signals across the supply chain. The mechanism is designed to serve as an easy button of sorts for compliantly passing consent in multiple countries and jurisdictions.

The platform currently supports consent strings from Europe and Canada (through their respective Transparency and Consent Frameworks) and signals from five US states (California, Colorado, Connecticut, Utah and Virginia). As part of its 2024 road map, the Tech Lab plans to add several more US states, India and Brazil.

Next up, the Tech Lab’s Accountability Platform is a standard framework for buyers, sellers and ad tech vendors to audit their partners and make sure they’re honoring consent signals throughout the ad supply chain.

The public comment period on the Accountability Platform ended on Feb. 27, and the Tech Lab expects to release the final spec in Q2.

But there is still a little time to comment on the Data Deletion Request Framework, which is a standardized protocol for managing and honoring data deletion requests.

In addition to propagating these requests through the supply chain, the framework uses JSON web tokens to make sure the data transmissions are secure and the deletion requests are authentic.

The comment period for the Delete Framework closes on April 22.

“Please provide us with feedback,” Katsur said. “It’s clear that privacy regulations are accelerating across the US at a very rapid pace – and this doesn’t even account for an active FTC, which has only magnified its focus on consumer privacy and the advertising industry.”

Must Read

Forget ROAS? The New Retail Metrics Game

Hey Readers, Welcome back to the AdExchanger Commerce Media Newsletter. Thanks for reading! This week, we’re examining the challenges involving online ad metrics. Which are, for the most part, relics of a bygone age. Take last-touch attribution or when a passing glance at half an ad gets rubber-stamped as viewable. And don’t get me started […]


Perion Shutters Content IQ, Its Made-For-Advertising Division

Laptop fans can rest a little easier. A network of well-known MFA sites operated by Perion-owned Content IQ have been taken offline.

‘Incrementality’ Is The Buzzword That Stole Prog IO

Well, that’s a wrap on Programmatic IO Las Vegas 2024! The AdExchanger editorial hopped on stage for a live recording of The Big Story to round up all the moments that made us go “a-ha” this week, including observations on commerce media, CTV and generative AI.

Privacy! Commerce! Connected TV! Read all about it. Subscribe to AdExchanger Newsletters

Paramount And Shopsense Add Programmatic Demand To Their Shoppable Ad Network

What if the new storefront is a person sitting on their couch and scrolling their phone?

Scott’s Miracle-Gro Is Seeing Green With Retail Media

It’s lawn season – and you know what that means. Scott’s Miracle-Gro commercials, of course. Except this time, spots for Scott’s will be brought to you by The Home Depot’s retail media network.

Walled Garden Platforms Are Drowning Marketers In Self-Attributed Sales

Sales are way up; ROAS is through the roof across search, social and ecommerce. At least, that’s what the ad platforms say.