IAB IAB Data Privacy and Consumer Consent 2

Question 1

What is third-party data in digital advertising?

Accepted Answer

Data collected by an entity other than the advertiser or the user, often aggregated and sold by data brokers

Answer

Data collected by an advertiser directly from its own website visitors

Answer

Anonymized data shared between two business partners

Answer

Data from government census records

Question 2

What has driven the industry shift toward cookieless advertising?

Accepted Answer

Browser restrictions on third-party cookies and growing privacy regulations like GDPR and CCPA

Answer

Rising costs of third-party cookie data

Answer

Poor performance of cookie-based campaigns

Answer

Advertiser preference for contextual over behavioral targeting

Question 3

What is a 'clean room' in digital advertising?

Accepted Answer

A privacy-safe environment where multiple parties can match and analyze first-party data without exposing raw user data

Answer

A secure server environment free of malware and ad fraud

Answer

A certified publisher environment with brand-safe content

Answer

A test environment used before launching live campaigns

Question 4

What does 'data minimization' mean under GDPR principles?

Accepted Answer

Collecting only the personal data that is necessary for a specified purpose

Answer

Compressing data files to reduce storage costs

Answer

Deleting all user data after each campaign ends

Answer

Using anonymized data rather than personally identifiable information

Question 5

What is a 'universal ID' solution in cookieless advertising?

Accepted Answer

A shared, persistent user identifier that works across publishers without relying on third-party cookies

Answer

A single login credential shared across all ad platforms

Answer

A standardized creative ID format for all digital ads

Answer

An IAB-issued identifier for ad tech vendors

Question 6

Under GDPR, what is 'legitimate interest' as a legal basis for data processing?

Accepted Answer

A legal basis allowing data processing when a controller has a genuine business need that doesn't override users' rights

Answer

A financial interest that a data controller has in selling user data

Answer

An exemption that applies only to non-profit organizations

Answer

A clause allowing unlimited data retention for analytics purposes