SlideShare a Scribd company logo
MediaPost’s Programmatic Insider Summit
DON'T GET CROSSED
UP WITH CROSS-
DEVICE TRACKING
Monday, April 24, 2017
Gary A. Kibel
Partner
Digital Media, Technology
& Privacy
212.468.4918
gkibel@dglaw.com
@GaryKibel
© 2017 Davis & Gilbert LLP
1
»Digital Advertising Alliance (DAA)
»Network Advertising Initiative (NAI)
»Federal Trade Commission (FTC)
»Legislation
»B2B contracts
»Q&A
CROSS-DEVICE TRACKING
Don’t Get Crossed Up With Cross-Device Tracking
»The Digital Advertising Alliance (DAA) is a consortium
of the leading national advertising and marketing trade
groups who together deliver effective, self-regulatory
solutions to online consumer issues
THE DIGITAL ADVERTISING ALLIANCE
(DAA) WWW.ABOUTADS.INFO
Don’t Get Crossed Up With Cross-Device Tracking2
3 Social Media and the Law
DAA MEMBERS
SELF-REGULATORY PRINCIPLES FOR
ONLINE BEHAVIORAL ADVERTISING
»Seven principles
- Education
- Transparency
- Consumer Control
- Data Security
- Material Changes
- Sensitive Data
- Accountability
Don’t Get Crossed Up With Cross-Device Tracking4
SELF-REGULATORY PRINCIPLES FOR
ONLINE BEHAVIORAL ADVERTISING
»Key requirements
- Enhanced notice on ads
- Notice on websites with data collection
- Third party liability
- Statement of adherence
- Enforcement (name and shame)
Don’t Get Crossed Up With Cross-Device Tracking5
DIGITAL ADVERTISING
ALLIANCE
»Principles
- Self-Regulatory Principles for Online Behavioral
Advertising
- Self-Regulatory Principles for Multi-Site Data
- Application of Self-Regulatory Principles to the
Mobile Environment
- Application of DAA Principles of Transparency
and Control to Data Used Across Devices
»More: eDAA, Digital Advertising Alliance of Canada
Don’t Get Crossed Up With Cross-Device Tracking6
APPLICATION OF
SELF-REGULATORY
PRINCIPLES TO THE
MOBILE ENVIRONMENT
»Precise Location Data
»Cross-App Data
»Personal Directory Data
Don’t Get Crossed Up With Cross-Device Tracking7
CROSS-DEVICE
TRACKING
Don’t Get Crossed Up With Cross-Device Tracking8
DAA – DATA USED ACROSS DEVICES
1. Transparency
and
2. Consumer
Control
“on the browser
or device on
which choice is
being
exercised…”
Don’t Get Crossed Up With Cross-Device Tracking9
Don’t Get Crossed Up With Cross-Device Tracking
NETWORK ADVERTISING
INITIATIVE
»Network Advertising Initiative
- NAI Code of Conduct
- NAI Mobile Application Code
- Guidance on the Use of Non-Cookie Technologies
for Interest-Based Advertising
Don’t Get Crossed Up With Cross-Device Tracking11
Don’t Get Crossed Up With Cross-Device Tracking
CROSS-DEVICE TRACKING
STAFF REPORT (JANUARY 2017)
»Recommendations
- Transparency
- Choice
- Sensitive information
- Reasonable security
»Benefits
- Seamless user experience
- Fraud detection and account security
- Better online experience
13 Don’t Get Crossed Up With Cross-Device Tracking
CROSS-DEVICE TRACKING
STAFF REPORT (JANUARY 2017)
»Focus on first parties
»Offline and online data
»DAA definition of sensitive information is unduly narrow
»Probabilistic targeting “might be less apparent to consumers”
»Companies don’t discuss cross-device tracking in their privacy
policies (3 out of 100 policies reviewed mentioned it)
»Relevant enforcement actions: Epic Marketplace; ScanScout;
Turn; InMobi
»DAA device-by-device opt-out vs. single opt-out
14 Don’t Get Crossed Up With Cross-Device Tracking
FEDERAL TRADE COMMISSION
ACT SECTION 5
»“Unfair methods of competition in or affecting
commerce, and unfair or deceptive acts or practices in
or affecting commerce, are hereby declared unlawful.”
- Deception = Misrepresentations or omissions likely to
mislead consumers acting reasonably under the
circumstances
- Unfairness = Causes or is likely to cause substantial
consumer injury, not reasonably avoided by the
consumer, and not outweighed by countervailing
benefits to consumers or competition
15 Don’t Get Crossed Up With Cross-Device Tracking
FTC – IN THE MATTER OF
SCANSCOUT, INC. (DECEMBER 2011)
»Video ad network
»ScanScout privacy policy – “You can opt-out of
receiving a cookie by changing your browser settings
to prevent the receipt of cookies.”
»However, changing browser settings did not remove
or block the Flash cookies used by ScanScout
»Deception claim
16 Don’t Get Crossed Up With Cross-Device Tracking
FTC – IN THE MATTER OF NOMI
TECHNOLOGIES, INC. (APRIL 2015)
»In-store beacon technology
»Nomi privacy policy – “Nomi pledges to ... Always allow
consumers to opt-out of Nomi’s service on its website as
well as at any retailer using Nomi’s technology.”
»FTC – “It’s vital that companies keep their privacy
promises to consumers when working with emerging
technologies, just as it is in any other context. If you tell a
consumer that they will have choices about their privacy,
you should make sure all of those choices are actually
available to them.”
17 Don’t Get Crossed Up With Cross-Device Tracking
FTC VS. TURN (DECEMBER 2016)
»Turn worked with telco to sync a unique ID with the cookies
and device identifiers of users, even those who had exercised
the choice to turn off tracking
»Turn’s privacy policy stated that consumers could turn off
tracking
»Policy did not disclose this type of tracking
Don’t Get Crossed Up With Cross-Device Tracking18
MASSACHUSETTS V. COPELY ADVERTISING
(APRIL 2017)
»Geofencing project
»Copely targeted ads to “abortion-minded women” while in
waiting rooms a health clinics.
»Tagged device IDs when near certain locations for up to 30
days.
»Sensitive data issues
»Consent issues
Don’t Get Crossed Up With Cross-Device Tracking19
LEGISLATIVE –
“DO NOT TRACK ONLINE ACT OF 2015”
»Do Not Track Online Act
- Proposed in 2015 by Senators Markey and Blumenthal
- Allows individuals to simply and easily indicate a preference
not to have online activities tracked or personal information
collected by online providers (limited exceptions)
- Prohibits certain uses of personal information
- Allows FTC to pursue civil penalties if consumer requests
are not honored
Don’t Get Crossed Up With Cross-Device Tracking20
ILLINOIS
(RIGHT TO KNOW ACT – 2017)
»“Consumers must be more than vaguely informed that a
business might share personal information with third parties”
»Privacy policy - Must identify the categories of PII collected,
the categories of third parties with whom PII is shared; and a
description of the customer’s rights to request information
»Within 30 days of a consumer’s request, an operator must
disclose all categories of PII disclosed and the names of all
third parties that received the PII
»Oh, by the way … there’s a private right of action!
Don’t Get Crossed Up With Cross-Device Tracking21
B2B CONTRACTS
»MSAs; IOs; SOWs
»Client contracts
»Vendor contracts
»Media contracts
»Obligation to make disclosures
»Obligation to manage opt-outs
»Compliance with standards
»Liability
»B2C – Privacy policy
22 Don’t Get Crossed Up With Cross-Device Tracking
QUESTIONS
To receive D&G Digital Media Alerts,
email: gkibel@dglaw.com
Gary A. Kibel
Partner
Digital Media, Technology
& Privacy
212.468.4918
gkibel@dglaw.com
@GaryKibel
© 2017 Davis & Gilbert LLP

More Related Content

PPTX
Transparency - The New Table Stakes
PPT
Social loco
PPT
Fishbowl Model - Team enClair
PDF
Writing Sample
PDF
Understanding Consumers' Local Search Patterns in a FinTech Future
PPTX
Staying on the Right Side of the Fence when Analyzing Human Data
PPTX
Maximizing & Exploiting Big Data in Digital Media....Legally
PPTX
Being Digital in Commercial Lines
Transparency - The New Table Stakes
Social loco
Fishbowl Model - Team enClair
Writing Sample
Understanding Consumers' Local Search Patterns in a FinTech Future
Staying on the Right Side of the Fence when Analyzing Human Data
Maximizing & Exploiting Big Data in Digital Media....Legally
Being Digital in Commercial Lines

What's hot (13)

PDF
Data opportunities mini whitepaper
PPTX
Crystal Ball and the Future of the Broker Distribution Channel
PDF
McAfee - Privacy Market
PDF
Singular Spot The Ad Fraud Presentation
PPTX
When trust boosts customer engagement
PDF
Recognition brochure (4 5-16)
PPT
IPA Social Media Report
PDF
How Big Data Helps Stores Like Macy's And Kohl's Track You Like Never Before ...
PPT
Meaningful communications for mobile 2020
PPT
Sponsor Breakfast Presentation by TruSignal
PPTX
PDF
[Webinar] How the Cookie Crumbled: Preparing for a Time without Third-Party C...
PDF
Research presentation: Affinity Marketing -- It’s Not What You Like, It’s Wha...
Data opportunities mini whitepaper
Crystal Ball and the Future of the Broker Distribution Channel
McAfee - Privacy Market
Singular Spot The Ad Fraud Presentation
When trust boosts customer engagement
Recognition brochure (4 5-16)
IPA Social Media Report
How Big Data Helps Stores Like Macy's And Kohl's Track You Like Never Before ...
Meaningful communications for mobile 2020
Sponsor Breakfast Presentation by TruSignal
[Webinar] How the Cookie Crumbled: Preparing for a Time without Third-Party C...
Research presentation: Affinity Marketing -- It’s Not What You Like, It’s Wha...
Ad

Similar to Don’t Get Crossed Up With Cross-Device Tracking (20)

PPTX
A Marketer’s Guide to Internet of Things Legal Issues
PPTX
Data – the Lifeblood of the Affiliate Marketing industry
PDF
TrustArc Webinar - Cross-Contextual-Advertising: Rethinking How Consumer Data...
PPTX
Automotive sales crashing into data? Driving customer engagement & growth in...
PDF
Do Not Track vs. Affiliate Marketing
PPT
Presentation Yun Li
PPT
Presentation Yun Li
PPT
Presentation Y U N L I
PPT
Presentation Yun Li
PDF
TrustArc Webinar - How Data Privacy Demands Impact Your Marketing Program
PPTX
Behavioraltargeting
PDF
Joint ad trade letter to ag becerra re ccpa 1.31.2019
PPT
Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel
PPTX
The State Of Online Privacy
PPTX
The State of Online Privacy
PDF
Big data: Bringing competition policy to the digital era – Background note – ...
PDF
TrustArc Webinar - Managing Online Tracking Technology Vendors: A Checklist f...
PPT
Say Good-Bye to Zero-Sum: Say Hello to Privacy and Marketing, by Design
PDF
Cookies, FLoC & GDPR: Marketing Impact
PDF
Lay of the Land for All Things Privacy
A Marketer’s Guide to Internet of Things Legal Issues
Data – the Lifeblood of the Affiliate Marketing industry
TrustArc Webinar - Cross-Contextual-Advertising: Rethinking How Consumer Data...
Automotive sales crashing into data? Driving customer engagement & growth in...
Do Not Track vs. Affiliate Marketing
Presentation Yun Li
Presentation Yun Li
Presentation Y U N L I
Presentation Yun Li
TrustArc Webinar - How Data Privacy Demands Impact Your Marketing Program
Behavioraltargeting
Joint ad trade letter to ag becerra re ccpa 1.31.2019
Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel
The State Of Online Privacy
The State of Online Privacy
Big data: Bringing competition policy to the digital era – Background note – ...
TrustArc Webinar - Managing Online Tracking Technology Vendors: A Checklist f...
Say Good-Bye to Zero-Sum: Say Hello to Privacy and Marketing, by Design
Cookies, FLoC & GDPR: Marketing Impact
Lay of the Land for All Things Privacy
Ad

More from MediaPost (20)

PPTX
Visible Wireless: Grass Roots Branding and Media Planning
PPTX
MediaPost Data & Programmatic Insider Summit - Survey Results
PPTX
Can the Past Predict the Future of CTV?
PPTX
First-Party Data Takes The Cake In A Post-Cookie World
PPTX
Real-time buying for real-time events: Leveraging Programmatic TV for Live Ev...
PDF
The Right Audience for the Job: Cadillac’s First Party Data Engine
PPTX
Sustained Innovation Through Creativity, Technology & Data
PPTX
Search and Performance Insider Summit - Survey Results
PPTX
Reaching Buyers Without Cookies
PPTX
Cookie Apocalypse!!!
PPTX
Leveraging Performance Video on Amazon
PPTX
MediaPost Publishing Insider Summit Survey
PPTX
When Less is More: Building a Successful Advertising Business from a Subscrip...
PDF
What Do First Party Data and Golf Have In Common?
PPTX
Turning Customers Into Fans: Church’s New Social Media Playbook
PPTX
Restaurant Customer Engagement: The Path to Personalization
PPTX
Delivery & Streaming, the Ultimate Experience with Roku
PPTX
Focus Brands’ Licensing Calculus
PDF
Three Tips to Maximize Creative Asset Efficiency
PPTX
The QSR Media Dispersion: Pre, Mid & Post Pandemic – By the Numbers
Visible Wireless: Grass Roots Branding and Media Planning
MediaPost Data & Programmatic Insider Summit - Survey Results
Can the Past Predict the Future of CTV?
First-Party Data Takes The Cake In A Post-Cookie World
Real-time buying for real-time events: Leveraging Programmatic TV for Live Ev...
The Right Audience for the Job: Cadillac’s First Party Data Engine
Sustained Innovation Through Creativity, Technology & Data
Search and Performance Insider Summit - Survey Results
Reaching Buyers Without Cookies
Cookie Apocalypse!!!
Leveraging Performance Video on Amazon
MediaPost Publishing Insider Summit Survey
When Less is More: Building a Successful Advertising Business from a Subscrip...
What Do First Party Data and Golf Have In Common?
Turning Customers Into Fans: Church’s New Social Media Playbook
Restaurant Customer Engagement: The Path to Personalization
Delivery & Streaming, the Ultimate Experience with Roku
Focus Brands’ Licensing Calculus
Three Tips to Maximize Creative Asset Efficiency
The QSR Media Dispersion: Pre, Mid & Post Pandemic – By the Numbers

Recently uploaded (20)

PDF
Social Media Marketing in 2025 blog 1 2.pdf
PDF
How to Break Into AI Search with Andrew Holland
PDF
5 free to use google tools to understand your customers online behavior in 20...
PDF
Digital Marketing Agency vs Freelancers and VAs: Which Should You Hire in 2025
PPTX
Best Mobile App Development Company in Lucknow
PPTX
Digital-Marketing-Strategy-Trends-and-Best-Practices-for-2025 PPT3.pptx
PPTX
Mastering in Website Competitor Analysis
PDF
Dream Powell - Project and Portfolio 3: Marketing
PDF
sm_67a1bc7f35716dcb1a9195ea_382528b8-2159-47be-a7ba-d034a449f849.pdf
PDF
It Takes a Village Campaign Plan Book; Sidra Medicine
PPTX
Opening presentation of Sangam Hospital Bodeli
PPTX
Smart Optics in the Field: Understanding the AX Visio
PPTX
Choose the Right SEO Agency India - 7 Key Tips by Clickbold Media
PPTX
Transform Your Business with Top Digital Marketing Services_EGlogics.pptx
PPTX
Best LLM SEO Tools for B2B Brands in 2025
PDF
The B2B Startup Marketing Playbook - How To Build A Revenue-Generating B2B Ma...
PDF
SEO vs. AEO: Optimizing for Google vs AI-Powered Search Assistants
PPTX
APA Examples Reference Examples Style and
PDF
FSSC 22000 Certification: Meaning, Benefits & Food Safety Compliance
DOCX
Project and Portfolio 2: Full Sail University
Social Media Marketing in 2025 blog 1 2.pdf
How to Break Into AI Search with Andrew Holland
5 free to use google tools to understand your customers online behavior in 20...
Digital Marketing Agency vs Freelancers and VAs: Which Should You Hire in 2025
Best Mobile App Development Company in Lucknow
Digital-Marketing-Strategy-Trends-and-Best-Practices-for-2025 PPT3.pptx
Mastering in Website Competitor Analysis
Dream Powell - Project and Portfolio 3: Marketing
sm_67a1bc7f35716dcb1a9195ea_382528b8-2159-47be-a7ba-d034a449f849.pdf
It Takes a Village Campaign Plan Book; Sidra Medicine
Opening presentation of Sangam Hospital Bodeli
Smart Optics in the Field: Understanding the AX Visio
Choose the Right SEO Agency India - 7 Key Tips by Clickbold Media
Transform Your Business with Top Digital Marketing Services_EGlogics.pptx
Best LLM SEO Tools for B2B Brands in 2025
The B2B Startup Marketing Playbook - How To Build A Revenue-Generating B2B Ma...
SEO vs. AEO: Optimizing for Google vs AI-Powered Search Assistants
APA Examples Reference Examples Style and
FSSC 22000 Certification: Meaning, Benefits & Food Safety Compliance
Project and Portfolio 2: Full Sail University

Don’t Get Crossed Up With Cross-Device Tracking

  • 1. MediaPost’s Programmatic Insider Summit DON'T GET CROSSED UP WITH CROSS- DEVICE TRACKING Monday, April 24, 2017 Gary A. Kibel Partner Digital Media, Technology & Privacy 212.468.4918 gkibel@dglaw.com @GaryKibel © 2017 Davis & Gilbert LLP
  • 2. 1 »Digital Advertising Alliance (DAA) »Network Advertising Initiative (NAI) »Federal Trade Commission (FTC) »Legislation »B2B contracts »Q&A CROSS-DEVICE TRACKING Don’t Get Crossed Up With Cross-Device Tracking
  • 3. »The Digital Advertising Alliance (DAA) is a consortium of the leading national advertising and marketing trade groups who together deliver effective, self-regulatory solutions to online consumer issues THE DIGITAL ADVERTISING ALLIANCE (DAA) WWW.ABOUTADS.INFO Don’t Get Crossed Up With Cross-Device Tracking2
  • 4. 3 Social Media and the Law DAA MEMBERS
  • 5. SELF-REGULATORY PRINCIPLES FOR ONLINE BEHAVIORAL ADVERTISING »Seven principles - Education - Transparency - Consumer Control - Data Security - Material Changes - Sensitive Data - Accountability Don’t Get Crossed Up With Cross-Device Tracking4
  • 6. SELF-REGULATORY PRINCIPLES FOR ONLINE BEHAVIORAL ADVERTISING »Key requirements - Enhanced notice on ads - Notice on websites with data collection - Third party liability - Statement of adherence - Enforcement (name and shame) Don’t Get Crossed Up With Cross-Device Tracking5
  • 7. DIGITAL ADVERTISING ALLIANCE »Principles - Self-Regulatory Principles for Online Behavioral Advertising - Self-Regulatory Principles for Multi-Site Data - Application of Self-Regulatory Principles to the Mobile Environment - Application of DAA Principles of Transparency and Control to Data Used Across Devices »More: eDAA, Digital Advertising Alliance of Canada Don’t Get Crossed Up With Cross-Device Tracking6
  • 8. APPLICATION OF SELF-REGULATORY PRINCIPLES TO THE MOBILE ENVIRONMENT »Precise Location Data »Cross-App Data »Personal Directory Data Don’t Get Crossed Up With Cross-Device Tracking7
  • 9. CROSS-DEVICE TRACKING Don’t Get Crossed Up With Cross-Device Tracking8
  • 10. DAA – DATA USED ACROSS DEVICES 1. Transparency and 2. Consumer Control “on the browser or device on which choice is being exercised…” Don’t Get Crossed Up With Cross-Device Tracking9
  • 12. NETWORK ADVERTISING INITIATIVE »Network Advertising Initiative - NAI Code of Conduct - NAI Mobile Application Code - Guidance on the Use of Non-Cookie Technologies for Interest-Based Advertising Don’t Get Crossed Up With Cross-Device Tracking11
  • 14. CROSS-DEVICE TRACKING STAFF REPORT (JANUARY 2017) »Recommendations - Transparency - Choice - Sensitive information - Reasonable security »Benefits - Seamless user experience - Fraud detection and account security - Better online experience 13 Don’t Get Crossed Up With Cross-Device Tracking
  • 15. CROSS-DEVICE TRACKING STAFF REPORT (JANUARY 2017) »Focus on first parties »Offline and online data »DAA definition of sensitive information is unduly narrow »Probabilistic targeting “might be less apparent to consumers” »Companies don’t discuss cross-device tracking in their privacy policies (3 out of 100 policies reviewed mentioned it) »Relevant enforcement actions: Epic Marketplace; ScanScout; Turn; InMobi »DAA device-by-device opt-out vs. single opt-out 14 Don’t Get Crossed Up With Cross-Device Tracking
  • 16. FEDERAL TRADE COMMISSION ACT SECTION 5 »“Unfair methods of competition in or affecting commerce, and unfair or deceptive acts or practices in or affecting commerce, are hereby declared unlawful.” - Deception = Misrepresentations or omissions likely to mislead consumers acting reasonably under the circumstances - Unfairness = Causes or is likely to cause substantial consumer injury, not reasonably avoided by the consumer, and not outweighed by countervailing benefits to consumers or competition 15 Don’t Get Crossed Up With Cross-Device Tracking
  • 17. FTC – IN THE MATTER OF SCANSCOUT, INC. (DECEMBER 2011) »Video ad network »ScanScout privacy policy – “You can opt-out of receiving a cookie by changing your browser settings to prevent the receipt of cookies.” »However, changing browser settings did not remove or block the Flash cookies used by ScanScout »Deception claim 16 Don’t Get Crossed Up With Cross-Device Tracking
  • 18. FTC – IN THE MATTER OF NOMI TECHNOLOGIES, INC. (APRIL 2015) »In-store beacon technology »Nomi privacy policy – “Nomi pledges to ... Always allow consumers to opt-out of Nomi’s service on its website as well as at any retailer using Nomi’s technology.” »FTC – “It’s vital that companies keep their privacy promises to consumers when working with emerging technologies, just as it is in any other context. If you tell a consumer that they will have choices about their privacy, you should make sure all of those choices are actually available to them.” 17 Don’t Get Crossed Up With Cross-Device Tracking
  • 19. FTC VS. TURN (DECEMBER 2016) »Turn worked with telco to sync a unique ID with the cookies and device identifiers of users, even those who had exercised the choice to turn off tracking »Turn’s privacy policy stated that consumers could turn off tracking »Policy did not disclose this type of tracking Don’t Get Crossed Up With Cross-Device Tracking18
  • 20. MASSACHUSETTS V. COPELY ADVERTISING (APRIL 2017) »Geofencing project »Copely targeted ads to “abortion-minded women” while in waiting rooms a health clinics. »Tagged device IDs when near certain locations for up to 30 days. »Sensitive data issues »Consent issues Don’t Get Crossed Up With Cross-Device Tracking19
  • 21. LEGISLATIVE – “DO NOT TRACK ONLINE ACT OF 2015” »Do Not Track Online Act - Proposed in 2015 by Senators Markey and Blumenthal - Allows individuals to simply and easily indicate a preference not to have online activities tracked or personal information collected by online providers (limited exceptions) - Prohibits certain uses of personal information - Allows FTC to pursue civil penalties if consumer requests are not honored Don’t Get Crossed Up With Cross-Device Tracking20
  • 22. ILLINOIS (RIGHT TO KNOW ACT – 2017) »“Consumers must be more than vaguely informed that a business might share personal information with third parties” »Privacy policy - Must identify the categories of PII collected, the categories of third parties with whom PII is shared; and a description of the customer’s rights to request information »Within 30 days of a consumer’s request, an operator must disclose all categories of PII disclosed and the names of all third parties that received the PII »Oh, by the way … there’s a private right of action! Don’t Get Crossed Up With Cross-Device Tracking21
  • 23. B2B CONTRACTS »MSAs; IOs; SOWs »Client contracts »Vendor contracts »Media contracts »Obligation to make disclosures »Obligation to manage opt-outs »Compliance with standards »Liability »B2C – Privacy policy 22 Don’t Get Crossed Up With Cross-Device Tracking
  • 24. QUESTIONS To receive D&G Digital Media Alerts, email: gkibel@dglaw.com Gary A. Kibel Partner Digital Media, Technology & Privacy 212.468.4918 gkibel@dglaw.com @GaryKibel © 2017 Davis & Gilbert LLP