Masters of Privacy10 Nov 2024

Peter Craddock: ePrivacy exceptions, advertising, analytics, the limits of consent and server-side processing

The EDPB has finally adopted its much feared Guidelines on the scope of article 5.3 of the ePrivacy Directive, but consent may still be avoided in some cases not specifically covered by an exemption (e.g., analytics). Absent such an exception, and in light of dismal consent rates, publishers and platforms have embraced highly controversial “Consent or Pay” models. Plan C? Server-side processing (Conversion APIs, Enhanced Conversions, Data Clean Rooms…), not without its own challenges.

We have gone through all of it with Peter Craddock in his second appearance on Masters of Privacy.

Peter Craddock is a lawyer as well as a software developer, and he uses this dual background to help clients find legal solutions to technical problems and technical solutions to legal problems. He is based in Brussels and helps international companies with their global data strategy and with EU data litigation. He notably has strong expertise in the legal aspects of digital advertising and adtech, and has been one of the most prominent commentators of recent legal developments in that area.

References:

Peter Craddock on LinkedIn
Op-Ed: A critical analysis of the EDPB's "Pay or Consent" Opinion (Peter Craddock)
Peter Craddock: Comparison of the final version of the EDPB’s ePrivacy guidelines with the version of November 2023 (including links to more in-depth comments on those guidelines)
EDPB Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms
AEPD guidelines for the use of cookies without need for consent in the context of digital analytics (ES)
Peter Craddock on Masters of Privacy (February 2024): Could core advertising components fall under the “strictly necessary” exemption of the ePrivacy Directive?
Romain Robert: Pay or OK in AdTech - How it started and where it’s going (Masters of Privacy)
Renzo Marchini: Unintended consequences of the EDPB guidelines on storage and access under article 5.3 of the ePrivacy Directive (Masters of Privacy)
Cristiana Santos and Victor Morel: The problem with CMPs and TCF-based cookie paywalls (Masters of Privacy)
Robert Bateman: Consent or Pay (Masters of Privacy)
Peter Hense: How first party data will kill CMPs (Masters of Privacy)

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(124)

Erica Irvin (Lowe’s): the new boundaries of the discipline

Are privacy compliance and AI governance poised to remain stand-alone practices within the large enterprise? What is their interplay with an all-encompassing compliance effort? How will we deal with c...

3 Aug 202525min

Christine Desrosiers (Boltive): Privacy Tech spotlight V - understanding Manipulative Design and rolling out comprehensive client-side monitoring

What is “manipulative design”? How does this concept differ from “dark patterns”? How could we expand website and mobile app monitoring to a company’s ad stack? Boltive’s Christine Desrosiers has joi...

27 Jul 202532min

Ansuman Acharya (Airbnb): What is Privacy UX?

Could transparency and control requirements be seamlessly integrated within delightful customer journeys? How has a famously design-led company (Airbnb) mastered Privacy User Experience? Ansuman Achar...

19 Jul 202529min

Nathalie Barrera: NIS2 (EU) and the interplay between cybersecurity, privacy, AI, and IoT data laws

Will EU cybersecurity laws result in new global standards? Should companies handle NIS2 compliance in concert with GDPR, AI Act, or Data Act requirements? Does it make sense to take data localization ...

13 Jul 202530min

Vaibhav Antil (Privado): Privacy Tech spotlight IV - from trust to evidence

How do we move from mere words to actual baked-in privacy? Can built-in alerts, code scanning tools, or server-side auditing make life much easier for DPOs and legal teams? We are joined by Vaibhav A...

7 Jul 202528min

John Pavolotsky: How successful can US privacy laws be at regulating AI models and systems?

John Pavolotsky is a partner at Stoel Rives in San Francisco. He is co-chair of the firm's AI, Privacy & Cybersecurity group and focuses his practice on data privacy, information security, and complex...

30 Jun 202527min

Thomas Ghys: The privacy engineer as a translator, an auditor, and a programmer

Who can really claim to be a privacy engineer? Does this change in the digital marketing arena? What is the winning formula to integrate this role within the company’s privacy practice? Thomas Ghys ha...

21 Jun 202528min

Cillian Kieran (Ethyca): Privacy Tech spotlight III - compliance as an engineering challenge

Can we shift the focus from documentation to technical implementation? How can we bridge the cultural differences between legal teams and engineers? What do we mean with open-source data classificatio...

14 Jun 202527min