• MarTech Today
  • Sections
    • Ads
    • Marketing
    • Content
    • Sales
    • Analytics
    • Management
    • Resources
    • More
    • Home
  • MarTech Today
  • Ads
  • Marketing
  • Content
  • Sales
  • Analytics
  • Mgmt
  • Resources
  • More
  • Events
  • SUBSCRIBE

MarTech Today

MarTech Today
  • Ads
  • Marketing
  • Content
  • Sales
  • Analytics
  • Management
  • Resources
  • More
  • Events
  • Newsletters
  • Home
Martech: Analytics & Data

IAB releases CCPA Compliance Framework

The "Limited Service Provider Agreement" is intended to simplify compliance for publishers and technology companies.

Greg Sterling on December 5, 2019 at 10:46 am
  • More

The IAB has released version 1.0 of the IAB CCPA Compliance Framework for publishers and technology companies involved in the programmatic ecosystem. This follows the recent publication of version 1.0 of the Framework’s technical specifications last month.

The IAB CCPA Compliance Framework seeks to be comprehensive though not a substitute for individual company due diligence or legal advice. Similar to the group’s GDPR Compliance Framework, the initiative is the result of a months-long process involving input from multiple stakeholders, lawyers and other experts. It’s “intended to be used by those publishers who ‘sell’ personal information and those technology companies that they sell it to.”

The Agreement. There are two component elements to the IAB Compliance Framework:

  • Technical specifications (previously released)
  • A “Limited Service Provider Agreement” (.pdf) that binds supply chain partners to conduct that fulfills CCPA’s rules and requirements.

Any company “that engages in (e.g., submits bid requests/responses) or supports (e.g., measurement and fraud, analytics, and reporting) an RTB or Direct Transaction in the digital advertising industry is eligible to become a Signatory [to the Limited Service Provider Agreement]. Membership in IAB is not a predicate to participation or Signatory status.”

Providing compliance confidence. In a blog post, Michael Hahn SVP and General Counsel of IAB, said, “We believe that the Framework and Agreement [support CCPA compliance] by providing ad tech companies with assurances that participating publishers provide California consumers with explicit notice and the opportunity to opt-out of the sale of their personal information. Participating publishers will also have assurances that ad tech companies and vendors use personal information pursuant to limited CCPA permitted ‘business purposes’ when California consumers exercise the right to opt-out of the sale of their personal information.”

All companies covered by CCPA must “[p]rovide a clear and conspicuous link on the business’s Internet homepage, titled ‘Do Not Sell My Personal Information,’ to an Internet Web page that enables a consumer, or a person authorized by the consumer, to opt-out of the sale of the consumer’s personal information.”

Sending opt-out signals downstream. If a user opts-out – and there are early indications opt-out rates will be high – publishers must send a signal to downstream technology companies of that opt-out request. The IAB Agreement “will [then] require the sale of personal information to cease in such instance [and] cause downstream technology companies to become service providers of the publisher.” That designation imposes specific rules on data usage, unless otherwise permitted by CCPA.

There are also a growing number of third party software solutions in the market that seek to help publishers comply and are compatible with the IAB Framework.

Why we should care. The IAB says there are “two significant benefits” from use of the Framework: 1) “It creates a simple and efficient vehicle from which to create service provider relationships in the data supply chain without the need of having to enter into hundreds of separate contracts” and 2) “It provides participants with the opportunity to demonstrate accountability.”

The IAB’s Hahn added that the IAB Framework “represents a tremendous opportunity for the digital advertising industry to demonstrate that it recognizes the importance of privacy and data protection, and the clear message it is receiving from the market and consumers in particular.” However, the industry really has no choice.

More about CCPA and consumer privacy regulation

  • 5 privacy regulations marketers need to know for 2021
  • How consumers can earn money from their data
  • California's 'CCPA 2.0' is probably going to pass, here's what changes
  • Global Privacy Control group aims to succeed where ‘do not track’ failed

Opinions expressed in this article are those of the guest author and not necessarily MarTech Today. Staff authors are listed here.



About The Author

Greg Sterling
Greg Sterling is a Contributing Editor to Search Engine Land, a member of the programming team for SMX events and the VP, Market Insights at Uberall.

Related Topics

CCPA - California Consumer Privacy ActChannel: Martech: Analytics & Data

Subscribe to receive daily martech news and expert insights. See terms.


We're listening.

Have something to say about this article? Share it with us on Facebook and Twitter.

Get the daily newsletter digital marketers rely on.
See terms.

ATTEND OUR EVENTS

MarTech 2021: March 16-17

MarTech 2021: Sept. 14-15

MarTech 2020: Watch On-Demand

×

Attend MarTech - Click Here


Learn More About Our MarTech Events

White Papers

  • State of Email Marketing 2021 Report
  • Three Pillars of CRM Data Management
  • What Customer Experience Means in 2021
  • The 7 Phases of a Website Redesign
  • Rearchitecting Revenue: Accelerating Demand Through Data
See More Whitepapers

Webinars

  • Crawl Your Way Towards Better Search Results With Dynamic Rendering
  • The AI Revolution Is Coming to Every Stage of Your Buyer’s Journey
  • The Fundamentals of Link Building for E-Commerce & Affiliate Sites in 2021
See More Webinars

Research Reports

  • Local Marketing Solutions for Multi-Location Businesses
  • Enterprise Digital Asset Management Platforms
  • Identity Resolution Platforms
  • Customer Data Platforms
  • B2B Marketing Automation Platforms
  • Call Analytics Platforms
See More Research

Register For MarTech - Free

Receive daily martech news and analysis.

Channels

  • Advertising
  • Marketing
  • Content
  • Social
  • Commerce
  • Sales
  • Analytics
  • Management
  • Home

Our Events

  • MarTech
  • SMX

Resources

  • White Papers
  • Research
  • Webinars

About

  • About Us
  • Contact
  • Privacy
  • Marketing Opportunities
  • Staff

Follow Us

  • Facebook
  • Twitter
  • LinkedIn
  • Newsletters
  • RSS

© 2021 Third Door Media, Inc. All rights reserved.