CNIL (french DPA) clarifies email tracking pixels :
- Consent is required in most cases, with narrow exemptions for transactional emails
- Transparency and easy opt-out are mandatory
www.cnil.fr/fr/recommand...
The European CMP Association (ECMPA), the European federation of Consent Management Platforms (CMPs), has officially been established, based in Bruxelles www.mind.eu.com/media/articl... cc @chiareta.bsky.social
CNIL (french DPA) announces that a publisher may offer a single cross-device cookie choice to reduce consent fatigue, but the user must be clearly informed. When logging in on a new device, a notification banner may replace a full consent banner
www.cnil.fr/fr/cookies-e...
Considered as a "hybrid service comprising features of private messaging and of an online platform", EU Commission has designated WhatsApp as a Very Large Online Platform (VLOP) under the Digital Services Act (DSA). They have 4 months to comply with DSA digital-strategy.ec.europa.eu/en/news/comm...
Belgian Market Court about IAB Europe vs APD :
- Scope limited to joint controllership over TC Strings only
- APD must reassess action plan within this scope
- APD violated IAB Europe's right to be heard
- No role for complainants in action plan validation
iabeurope.eu/iab-europe-w...
A paper on "Code as personal data", reminded me of a couple of things I always say about coding which are : It can be considered as an Art and it could identify someone or something (with a privacy focus). My Linkedin post =>
www.linkedin.com/posts/alexan...
Texas is suing Sony, Samsung, LG, Hisense, and TCL (based on China) for collecting personal data through Automated Content Recognition ("ACR") technology without the user’s knowledge or consent. After TikTok, now CTV to be blocked in US? texasattorneygeneral.gov/news/release...
Any chance I get my LinkedIn review with SpotifyWrapped?
About Online marketplaces in CJEU ruling :
- Is Data controller (GDPR) in user-generated ads on its platform
- Responsible for ensuring that personal data in ads is identified and verified before publication
- Obtain consent from anyone identified in ads
curia.europa.eu/jcms/upload/...
Just received that in the app. LinkedIn asking the user to choose how the ads can be displayed
To resume discussion between EU council and parliament on chat control :
- No encryption backdoors
- No mandatory scanning
- Min age 16 for social media, video platforms, and AI companions
- Dev age-verification app and the EU digital ID (eID) wallet
www.europarl.europa.eu/news/en/pres...
CNIL (french DPA) insights on French attitudes toward data use and ad consent :
- 65% willing to sell their data (among, 6% would sell for < 1€ and 14% for > 200 euros per month)
- 35% wouldn’t sell their data even at any price
www.cnil.fr/en/monetisat...
EU preparing to allow users to set their preferences for cookies at browser level but:
- User consent must be site specific
- Per browser: a login, an ID?
- What about the CMP doing it?
In any case, the topic will come back to site specific or cross-site
www.theverge.com/news/823788/...
Interesting experiment from criteo and raptive using a real time bidding infrastructure where an AI crawler paid for access to content www.adweek.com/media/publis...
IAB Tech Lab launches Device Attestation in OM SDK. The approach involves adapting the Privacy Pass protocol (token system that privately verifies identity and proves authenticity) for a digital advertising verification use case
www.prnewswire.com/news-release...
EU commission is is in advanced talks for recognizing "legitimate interest" as legal basis for training AI with personal data under the GDPR. Following that, the challenge will be the accountability
www.mlex.com/mlex/article...
LiveRamp donated User Context Protocol (UCP), enabling IAB Tech Lab to let AI agents in advertising and marketing interoperate via the exchange of signals (identity, contextual and reinforcement info), using federated learning for privacy
iabtechlab.com/data-standar...
The French AdTech Criteo preparing a move to the US. It’s concerning to see that you must relocate in order to get the flexibility you want/need regarding your business wmediaresearch.com/2025/10/29/c...
In one year, with the release of Chrome 154 in October 2026, Google will change the default settings of Chrome to enable "Always Use Secure Connections". Chrome will ask for the user's permission before the first access to any public site without HTTPS security.googleblog.com/2025/10/http...
According to Forrester in 2026 :
- Open web will loose 30% of ad revenue as users shift to AI generated summaries and answers, including CTV, streaming audio, social video...
- AI-driven privacy breaches will lead to a 20% rise in class-action lawsuits.
www.businesswire.com/news/home/20...
Apple could disables App Tracking Transparency (ATT) due to some conflicts (lawsuits etc...) www.macrumors.com/2025/10/23/a...
Clarification from Prebid about Transaction id (TID) :
- Prebid.js v10.9 (Aug 2025) lets publishers choose between global or SSP-specific TIDs.
- Future updates will offer more control, while earlier versions continue using global TIDs prebid.org/prebid-org-c...
Amazon launches AWS RTB Fabric to run Real-time bidding (RTB) with partners, reducing 80% of cloud networking cost and lowering latency for partners aws.amazon.com/rtb-fabric/
MRC (Media Rating Council) clarifies that Ad Verification vendors offering Property-Level services based on keywords and context can't position these services as "Brand Safety" unless they meet content-level standards for images, video, and audio mediaratingcouncil.org/sites/defaul...
While CHIPS and FedCM will keep running including Private State Tokens, a lot of Privacy Sandbox Technologies will be retired by Google privacysandbox.com/news/update-...
Built on top of OpenPath and OpenAds, PubDesk (a tool for publisher) is the new publisher-facing dashboard from The Trade Desk (TTD) to help publisher better align with buyer demand www.adexchanger.com/publishers/i...
Starting January 2027, California will become the first state to require browsers to provide users a simple, built-in way to block the sale or sharing of their personal data (e. g. GPC Global privacy control) cppa.ca.gov/announcement...
Microsoft has announced Amazon DSP as its preferred transition partner for Microsoft Invest customers, as part of its strategy to transition away from media buying through their DSP. The transition will begin immediately advertising.amazon.com/library/news...
