The Belgian data protection authority has fined IAB Europe €250,000 after ruling that its Transparency and Consent Framework, which is used extensively throughout the advertising industry across the European Union, does not comply with a number of EU General Data Protection Regulation provisions. The violations include a failure: to establish a lawful basis for processing, to adequately inform data subjects of the nature and scope of the processing, to implement the Privacy by Design/Default principle, to keep a record of processing activities, to appoint a DPO or conduct a DPIA. In this article, the IAPP digs into the Belgium DPAs decision and gets reaction from several privacy professionals, including Davis & Gilbert Partner Gary Kibel, CIPP/US, who said it “impacts the ability of the majority of the industry to engage in retargeting.”
The ruling will have far-reaching implications as all data collected through the TCF must now be deleted. Over 1,000 companies pay IAB Europe to use it.
What is this page?
You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.
The Privacy Newsfeed monitors over 300 global publications, of which more than 4,350 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.
