Your Privacy Matters

We use cookies to enhance your experience on our site and to support our marketing efforts. Please view our Privacy Policy for more information.

Manage Preferences

IAPP GPS - Our Thoughts, Part 2: What Regulators Want Us To Do – The Value of Proactivity

Posted

May 1, 2024

As discussed in my previous blog post, several of us at Boltive got the opportunity to travel to DC to attend IAPP’s Global Privacy Summit (GPS) at the beginning of April.

In reviewing my notes and thinking about what might be most interesting to those who couldn’t make it, I kept returning to the regulator sessions because I hear so many myths and misconceptions about regulators, regulations, and enforcement as I talk to people in the marketing and privacy worlds.

The sessions I attended featured regulators from across the world, including US regulators at both the state and federal levels. Even though there are differences and nuances across jurisdictions, a number of common themes emerged, and a lot of common myths were busted.

In my previous post – part 1 – I summed up what I heard regulators tell us they want us to know.

And in this post – part 2 – I will sum up what I heard them tell us they want us to do.

Make a Good Faith Effort

A common theme among the sessions is that the regulators honestly understand that compliance is challenging.

As Michele Lucan (Connecticut) put it, “We are not looking for perfection, we are looking for proactivity, and your ability to show your homework.”

The regulators want us to read the regulations and engage with the guidance they are publishing (see my previous post for examples) to understand our obligations, and then take action. Yes, this means companies have to roll up their sleeves and invest some effort: get policies and procedures in place, make sure rights fulfillment mechanisms work, update vendor contracts and privacy notices, and so on.

It can be a lot of ground to cover while juggling all the other demands of a business environment whose pace seems to never stop accelerating, but there is no getting around it. And the longer a company waits to start, the riskier the bet. When a regulator sends a letter, a company typically has a short amount of time (ex. 30 days) to respond with all relevant documents.

And yes, building up your documentation over time is important. US and EU regulators have been saying publicly – for years now, not just at GPS – that companies get credit for making a good faith effort. Documents and paper trails that demonstrate that good faith effort matter.

If you start when you get the letter, it’s already too late.

Michael Macko, Deputy Director of Enforcement of the California Privacy Protection Agency, also underscored the importance of getting documentation in place – not just the documentation of your policies and processes, but also documentation of your own internal enforcement of those policies, such as records around staff training and disciplinary actions taken for lapses.

From the technology side, where I spend my days, I would build on that to suggest adding details about how you are enforcing data sharing clauses in your vendor contracts, how you are monitoring governance of your site technology, and how you handle lapses there, as well.

Regulators’ Priorities for 2024

As with the regulations themselves, there are nuances across jurisdictions, but we heard broad alignment on key priorities this year:

  1. Targeted advertising, especially related to kids and teens. 12 out of 13 US state privacy laws in effect or going into effect this year specifically call out targeted advertising as an area of particular concern. Whether or not you agree that advertising is a high risk activity, expect scrutiny in this area across the US and Europe.
  2. Operationalization of core requirements. There are lots of nuances in regulation, but there are “gateway issues,” as Michael Macko (California) called them, that need to be firmly in place at this point across multiple jurisdictions and countries. These include things like proper privacy notice updates, timely fulfillment of consumer rights requests – including the right to opt out of Sale/targeted advertising – and avoidance of manipulative patterns in consumer privacy interfaces.
  3. Facial recognition, AI, and automated decision making. This is a broad topic, but to start, companies need to dig deeper with vendors who are incorporating AI in their products, to ensure they understand what’s happening and where the risks are.

The panelists across all jurisdictions noted that priorities can shift based on media reports, consumer complaints, and legislative direction, as well as their ongoing cooperation and coordination with other regulators. Keep an eye out for press releases from the regulators where you do business.

In the meantime, consider where these priorities map to your current business practices. Do you have a blind spot around data sharing in your digital ad supply chain? Are you sure your opt-out mechanism for targeted advertising is effective? When was the last time you checked that your consumer rights request mechanisms are working as expected? Are your vendors adding AI features without informing you?


Digital, on the whole, is going through a rapid period of evolution as we adjust to the reality of new regulations and heightened consumer expectations. The technology can be hard to wrangle; business processes and organizational complexity harder still. As our industry works through these growing pains, and learns what this new regulated landscape means for companies, we should take the regulators at their word: get proactive, read the regs and guidance, make a good faith effort to comply.

Every day, Boltive helps companies work through these steps, as well as automate the monitoring of sites and offsite digital ad campaigns. To find out more about how we can help you, as well as get a complimentary scan of your site, please reach out!

Subscribe to our Newslettter

Subscribe to our Newslettter

Privacy Compliance Teams are Swamped… But Help Is On the Way.

How do businesses handle more consumer demand for proactive control over their personal information when regulatory bodies are giving them what they want?

Read More
Digital Privacy Rules are Still a Mess, But the Future of Compliance is Here

With U.S. privacy laws in flux, Boltive's Privacy Guard simplifies compliance and empowers consumers with control over their data.

Read More
Boltive Launches New Product Ad Monitor: Revolutionizing Ad Insights with AI-Powered Discovery Engine

Empowering Brands and Publishers with Advanced AI Technology for Real-Time Ad Compliance and Enhanced Security

Read More
Case Study Expanding Ad Security to Mobile Apps

Learn how BuzzFeed expanded their partnership with Boltive to protect consumers on their mobile app.

Read More
Navigating Digital Security: Boltive's Q1 2024 Risk Report

Review the latest ad security data gathered by Boltive's Ad Lightning product.

Read More
Celebrating Boltive Milestones

From ad security to data privacy, discover all of the major milestones Boltive has achieved over the years.

Read More
IAPP GPS - Our Thoughts, Part 2: What Regulators Want Us To Do – The Value of Proactivity

Catch up on Part 2 of Christine Desrosiers’s thoughts from IAPP GPS as she dives into What Regulators Want Us To Do.

Read More
IAPP GPS - Our Thoughts, Part 1: What Regulators Want Us To Know – Busting Common Myths

Follow along as Boltive team member, Christine Desrosiers, shares her notes from the IAPP Global Privacy Risk Summit.

Read More
Decoding the Art of Deception: Insights from Our Boltive AI Engine

In this blog post, we’ll delve into the world of deceptive non-compliant ads discussing how our Boltive AI Engine is helping combat this problem.

Read More
Get Your Time Back - How AI Solves your "Unknown" Tag & Cookie Problem

Discover how the Boltive Object Identification Engine revolutionizes the way we manage tags and cookies, making manual searches a thing of the past.

Read More
CG Infinity and Boltive Forge a Partnership to Enhance Data Protection

Boltive and CG Infinity have partnered to provide a data privacy solution in a time where privacy regulations are beginning to really ramp up.

Read More
On-demand Webinar - Demystifying Digital Privacy

Discover the secrets behind cookies, pixels, and tags and gain a deeper understanding of these tools and how they affect your data privacy practices.

Read More
Prioritizing Children's Privacy: Strategies for Ethical Advertising and the Use of AI

As children and teens become more exposed to the dangers of social media and online advertising, regulators are stepping in to help protect them.

Read More
Active Threats - Feb. 2024 - ScamClub Update

Catch up on the latest updates from the ScamClub Active Threat that the Ad Lightning product has identified.

Read More
Ad Security Reimagined: Exploring Boltive's Artificial Intelligence Techniques

Explore Boltive’s use of artificial intelligence in the world of ad security and the ability to quickly identify and mitigate unwanted content.

Read More
Case Study - Defensive Against Offensive Ads

Read how Sovrn Holdings leveraged Ad Lightning capabilities to defend against offensive ads.

Read More
How Best-in-Class Companies Are Preparing for 2024’s State Privacy Regulations

With new state regulations around consumer data collection going into effect in 2024, top companies are taking action to ensure they are staying compliant.

Read More
Companies Continue to Share Health Data Despite New Privacy Laws

Are health websites sharing personal or sensitive data? Read this report from Boltive and Consumer Reports on our findings.

Read More
Active Threats - Jan. 8-10, 2021

‍Detected and blocked a reoccurring redirect campaign impacting 50 domains.

Read More
Active Threats - Feb. 22-24, 2021

‍Redirect campaign targeting both mobile and desktop users with fake update messages.

Read More
Active Threats - Apr. 2-5, 2021

‍Nefarious campaign impacting 25+ different domains.

Read More
Active Threats - May 18-25, 2021

‍Redirect campaign spanning almost 1,500 sites over the past 7-days.

Read More
Active Threats - Jun. 16-23, 2021

Fraudsters hosting obfuscated scripts on AWS & Yahoo platforms, attempted to deliver malicious redirects to over 300 different domains.

Read More
Active Threats - Jul. 21-28, 2021

This malicious campaign has two methods of triggering the redirect.

Read More
Active Threats - Nov. 15-22, 2021

‍Desktop redirect campaign impacting 1,300 domains.

Read More
Active Threats - Oct. 17, 2022

Fake google search rewards pop-up attack.

Read More
Risk Report - Oct. 2023

Review the ad security data gathered by Boltive's Ad Lightning product in this month's Risk Report.

Read More
Active Threats - Nov. 29

Catch up on the latest Active Threats that the Ad Lightning product has identified.

Read More
Your Privacy, Our Priority: Boltive Privacy Guard Supports TCF v2.2 and GPP

With the TCF v2.2 being released in November 2023 and an updated GPP coming in January 2024, are you prepared to be compliant with these new releases.

Read More
Business Ninjas Podcast - Secure Protection for Advertisers Against Invasive Media

Boltive CEO Dan Frechtling joins Kelsey McDonald on the WriteForMe podcast "Business Ninjas" to discuss data privacy.

Read More
Boltive and Slalom Consulting Join Forces to Bolster Data Privacy: A Powerful Alliance Against Emerging Risks

The new partnership provides customers with the ability to build privacy programs that stand up to growing scrutiny in data privacy regulations and evolving privacy threats.

Read More
Active Threats - Aug. 24th

Catch up on the latest Active Threats that the Ad Lightning product has identified.

Read More
Automating Threat Detection: How Boltive is Harnessing Artificial Intelligence to Reshape Ad Security

The Boltive team is leveraging the use of Artificial Intelligence to enhance the way publishers identify and mitigate threats.

Read More
Forbes Article - The Privacy Prescription: Rules Restricting Health Data Use And How To Employ More Holistic Security Measures

Though there are laws in place to protect health data, there are many compliance loopholes when it comes to data sharing.

Read More
Forbes Article - Will The U.S. Update Laws For Children's Digital Privacy?

Though there are laws addressing Children's Data Privacy, there is much room for improvement to protect them.

Read More
The Current State of Ad Security

Ad Security threats come in many forms - are you prepared to identify and address them?

Read More
Staying Compliant in an Evolving Data Privacy World

With new regulations recently released and more coming, are your privacy programs and technologies ready?

Read More
Dan Frechtling on More Than a Refresh Presents: Digital Privacy

In this More Than a Refresh episode the panel takes a deep dive into Digital Privacy. Join along as the group further explore data privacy regulations and how to best combat non-compliance.

Read More
Dan Frechtling on Inuizi's The Data Deep Dive

Boltive CEO Dan Frechtling joins Intuizi's Ron Donaire on The Data Deep Dive to discuss Boltive and how it fits into the Privacy world.

Read More
Forbes Article - How Privacy Got On The Calendar

Technology Council Member and Boltive CEO, Dan Frechtling dives into the evolution of data privacy.

Read More
Whitepaper: Digital Advertising Unboxed

Christine Desrosiers, our Director of Product, shares an insightful and informative whitepaper on the current state of privacy compliance.

Read More
Dan on The Cyber Pro Podcast ep. 236

Dan talks about his journey from marketing to data privacy. He is on a mission to protect consumers from invasive media. He shares his personal story about being tracked online and how the hyper targeting he was victim of started him on his journey to Boltive.

Read More
Dan Frechtling on That Tech Pod — "Why Aren't There Privacy Riots?

Today on That Tech Pod, Laura and Kevin speak with CCPA & CPRA Co-author Rich Arney and Boltive CEO Dan Frechtling.

Read More
3 Strategies to Improve Ad Revenue for Publishers

Given the uncertain macroeconomic climate, the outlook for digital ad spending is spotty at best. Over the last year we have seen that large advertisers are pulling back budgets, and it’s looking like that will only continue this year.

Read More
Boltive CEO Dan Frechtling Joins Forbes Technology Council

Our CEO Boltive, Dan Frechtling, has been accepted into Forbes Technology Council, an invitation-only community for world-class CEOs, CIOs, CTOs, and other technology executives

Read More
Our CEO, Dan Frechtling, featured on Leadership Live podcast with Daphna Horowitz

Don’t miss this episode of Leadership Live where Dan Frechtling discusses loss, leadership, and data privacy – what every CEO needs to think about.

Read More
Why Data Privacy is Being Overhauled in 2023: Dan Frechtling featured on the Security Weekly Productions podcast

Get the scoop about why Sephora was recently fined, and why data privacy is being overhauled in 2023

Read More
Why Having a Consent Management Platform is Not Enough

Assuming CMPs are infallible could be detrimental to your data privacy efforts, resulting in broken relationships with your consumers, damaged business reputations, and hefty fines.

Read More
Our Director of Product, Christine Desrosiers, discusses the current state of Ad Tech with Brand Safety Institute

Our Director of Product, Christine Desrosiers, discusses the current state of Ad Tech with Brand Safety Institute

Read More
Boltive featured in Quirk's Media

Boltive featured in Quirk's Media article on how to comply with changing data privacy regulation

Read More
Geekwire wrote about the heartening link that brought our CEO and CFO to Boltive.

Geekwire wrote about the heartening link that brought our CEO and CFO to Boltive.

Read More
Boltive featured in Consumer Reports

Boltive's Privacy Guard was recently featured in Consumer Reports

Read More
The Data is In! Ad Lightning’s 2021 Q2 Malware Report

We recently published our 2021 Q2 Malware Recap, so take a look at what has been plaguing website publishers and users this quarter.

Read More
Ad Lightning’s Interview with Monetization Platform Setupad

Six months ago, we partnered with Setupad and replaced their legacy ad quality solution to improve their coverage against bad ads.

Read More
Ad Lightning’s 2021 Guide to Blocking Bad Ads and Ensuring Ad Quality

Check out our our 2021 Guide to Blocking Bad Ads and Ensuring Ad Quality – a comprehensive roadmap that platforms and publishers can utilize to successfully navigate the frontlines in the battle of ad quality.

Read More
Ad Lightning’s Q1 2021 Recap: Taking Control to Protect Brands & Customers

Check out our recap of the state of ad quality in Q1 2021

Read More
Ad Lightning’s New Platform Partners Help Move the Ad Quality Fight Upstream

We're delighted to tell you about the significant uptick Ad Lightning has seen in platform partnerships in recent months.

Read More
What Ad Lightning’s Stellar NPS Score Means to Our Business & Partners

We place so much importance on NPS, I wanted to take a few minutes to explain what it is and how we use it at Ad Lightning

Read More
The Digital Ad Industry Set Records in 2020, but It’s Not Time to Relax

2020 was historic, and I don’t mean that in a good way. But there’s always a silver lining, even in the most trying of times.

Read More
Ad Lightning’s Q4 2020 Overview of Malicious & Unwanted Ads

Fraudsters were still up to no good in Q4, relying on everything from old standards to newer malicious horizons as their assault on publishers, platforms, consumers, and stakeholders continued full throttle.

Read More
Ad Lightning Makes Video QA Fast and Easy to Maximize Publisher ROI

Ad Lightning's video QA tool maximizes publisher ROI by identifying issues before ads go live. Fast, easy, and effective. Learn more at Boltive.

Read More
Ad Lightning’s Look at the Digital Advertising Industry in 2021

This is what Ad Lightning is providing to the ecosystem with our Look at the Digital Advertising Industry in 2021 – a prescient, thoughtful, practical group of insights that publishers and platforms can use to successfully navigate an uncertain future.

Read More
Looking Back on Ad Lightning’s 2020 State of Ad Quality Report

We take a moment to revisit a handful of topics discussed in our 2020 State of Ad Quality report, how they played out during the year, and look at what publishers can do to protect themselves from the bad guys.

Read More
3 Common Malicious Tactics: A Peek Into How Malware Operates

We're going to show you some of the most common gaps in the ad quality armor we’ve seen in the ecosystem and discuss what you can do to fill them.

Read More
Changes to CCPA Put Retargeting in the Regulatory Bullseye

Changes to CCPA Put Retargeting in the Regulatory Bullseye

Read More
IAPP Webinar 2022

Check out a presentation our CEO, Dan Frechtling, gave at the recent IAPP conference.

Read More
What Is A Consent String Failure

Having a Consent Management Platform (CMP) does not let you off the hook if your partners accidently (or intentionally) expose your customers’ data. You need to ensure information sharing consent is given in 4 key areas or you risk brand and profit damage.

Read More
Three Ways Online Ads Violate Privacy

Online ads can violate privacy in a number of ways, learn more about how user data may be at risk

Read More
Privacy Guard Overview

Understand the ad ecosystem and how Privacy Guard's technology provides tailored solutions to detect and resolve privacy issues.

Read More
Privacy Guard Fact Sheet

Learn more about how Boltive's new tool Privacy Guard delivers key insights you need to keep your consumer data -- and your brand reputation -- safe.

Read More
Privacy Guard Details

Get an overview of the online ad ecosystem, and how Boltive's new tool Privacy Guard can help keep your consumer data -- and your brand reputation -- safe.

Read More
Fortune 100 CCPA

63 of F100 Companies Don’t Meet CCPA Standards, 33 Use Methods That Often Fail

Read More
Opt-outs Routinely Fail

Did you know 15-30% of consent opt-outs designed to protect personal data routinely fail?

Read More
Interest Based Ads

Interest Based Ads Often Share Sensitive Private Information

Read More
Why Ad Lightning Became Boltive

The next clear step in protecting against invasive media.

Read More
Part 1: Should We Prepare? An Interview with CPRA Co-author Rick Arney

An interview with Rick Arney, board member of Californians for Consumer Privacy (CCP), and co-author of CCPA and CPRA

Read More
Part 2: Should We Prepare? An Interview with CPRA Co-author Rick Arney (pt. 2)

An interview with Rick Arney, board member of Californians for Consumer Privacy (CCP), and co-author of CCPA and CPRA

Read More
The Publisher Ad Security Checklist

The ad ecosystem is like the wild west. Legitimate advertisers and publishers are leaving themselves and their partners exposed to consequences due to non-compliance.

Read More
How Publishers Can Increase Revenue by Creating a Great Ad Experience in 2022

The perception and tolerance of digital advertising is changing.

Read More
3 Programmatic Trends in 2022 - That Didn't Happen in 2021

Our forecast of what's to come in 2022

Read More
How to prepare for the new state privacy laws in 2023

While 2023 may seem like a long way off, it will come around quicker than you think. It is never too early to prepare - particularly when it comes to updating your data privacy processes to remain compliant.

Read More
Q3 2022 Ad Privacy News Roundup

There has been a lot going on in the world of ad privacy. Here’s what you may have missed this quarter.

Read More
Chrome’s Heavy Ad Intervention: Here’s How We’re Solving It

As a member of the Coalition of Better Ads, Google has long been an advocate for blocking ads that hamper the user experience. But they took in one step further in fall 2020.

Read More
CPPA Testimony on Dark Signals

Current technologies and methods used today routinely interfere with Consumer Rights to Opt-Out. As important as it is to address dark patterns, it’s just as important to address dark signals.

Read More
Case Study: Boltive Privacy Guard Eliminates Data Leakage for a Fortune 500 Brand

Our Privacy Guard solution proves to be a success by identifying critical problems for Fortune 500 brands.

Read More
3 To-Dos to Ensure Compliance & Stop Ad Privacy Violations

3 To-Dos to Ensure Compliance & Stop Ad Privacy Violations

Read More
California Privacy Takeaways from ANA-BAA Law Marketing Conference

Several key takeaways from presentations related to California regulations.

Read More
California Privacy Compliance Has Irreversibly Changed

Wednesday, August 24 marked the end of the quiet period for enforcement of the California Consumer Privacy Act (CCPA).

Read More
Bracing for 2023 Privacy Laws: Most Businesses Aren’t Ready to Comply

Advertisers and brands are liable for any unauthorized data sharing in their digital advertising campaigns. Comply with regulations and protect your reputation.

Read More
5 things you need to know about privacy regulations and programmatic advertising

The digital advertising ecosystem is large and complex. And it’s expanding.

Read More
5 Ad Quality Malware Trends for 2022 and Beyond

Stay ahead of the game with our article on 5 Ad Security Malware Trends for 2022 and Beyond. Protect your business from evolving threats. Read now on Boltive.

Read More
Ad Lightning’s 2022 Q1 Ad Quality Report

We recently published our 2022 Q1 Ad Quality Report, so take a look at the key trends we’ve identified and how publisher’s are fighting back.

Read More
Previous Post
Next Post

No More Posts...

We're fresh out of content!

You're all caught up!

All the news that's fit to print.