IAB IAB Data Privacy and Consumer Consent 2 — Questions and Answers
Question 1: What is third-party data in digital advertising?
- Data collected by an advertiser directly from its own website visitors
- Data collected by an entity other than the advertiser or the user, often aggregated and sold by data brokers (Correct answer)
- Anonymized data shared between two business partners
- Data from government census records
Correct answer: Data collected by an entity other than the advertiser or the user, often aggregated and sold by data brokers
Third-party data is audience information collected, aggregated, and sold by companies that have no direct relationship with the consumer, such as data brokers and exchanges.
Question 2: What has driven the industry shift toward cookieless advertising?
- Rising costs of third-party cookie data
- Browser restrictions on third-party cookies and growing privacy regulations like GDPR and CCPA (Correct answer)
- Poor performance of cookie-based campaigns
- Advertiser preference for contextual over behavioral targeting
Correct answer: Browser restrictions on third-party cookies and growing privacy regulations like GDPR and CCPA
The deprecation of third-party cookies by major browsers and stricter privacy regulations have forced the industry to develop alternative targeting and measurement solutions.
Question 3: What is a 'clean room' in digital advertising?
- A secure server environment free of malware and ad fraud
- A privacy-safe environment where multiple parties can match and analyze first-party data without exposing raw user data (Correct answer)
- A certified publisher environment with brand-safe content
- A test environment used before launching live campaigns
Correct answer: A privacy-safe environment where multiple parties can match and analyze first-party data without exposing raw user data
A data clean room is a secure environment where two parties—such as an advertiser and a publisher—can analyze overlapping audience data without either party accessing the other's raw data.
Question 4: What does 'data minimization' mean under GDPR principles?
- Compressing data files to reduce storage costs
- Collecting only the personal data that is necessary for a specified purpose (Correct answer)
- Deleting all user data after each campaign ends
- Using anonymized data rather than personally identifiable information
Correct answer: Collecting only the personal data that is necessary for a specified purpose
Data minimization is a GDPR principle requiring organizations to collect and process only the personal data that is adequate, relevant, and limited to what is necessary for its stated purpose.
Question 5: What is a 'universal ID' solution in cookieless advertising?
- A single login credential shared across all ad platforms
- A shared, persistent user identifier that works across publishers without relying on third-party cookies (Correct answer)
- A standardized creative ID format for all digital ads
- An IAB-issued identifier for ad tech vendors
Correct answer: A shared, persistent user identifier that works across publishers without relying on third-party cookies
Universal ID solutions (such as The Trade Desk's UID2) create a persistent, privacy-compliant identifier—often based on hashed emails—that enables audience targeting without third-party cookies.
Question 6: Under GDPR, what is 'legitimate interest' as a legal basis for data processing?
- A financial interest that a data controller has in selling user data
- A legal basis allowing data processing when a controller has a genuine business need that doesn't override users' rights (Correct answer)
- An exemption that applies only to non-profit organizations
- A clause allowing unlimited data retention for analytics purposes
Correct answer: A legal basis allowing data processing when a controller has a genuine business need that doesn't override users' rights
Legitimate interest is one of six lawful bases under GDPR, allowing data processing when the controller's interest is balanced against the individual's rights and does not unduly impact them.
IAB IAB Data Privacy and Consumer Consent 2
What is third-party data in digital advertising?