CMOs are a bundle of nerves these days. Blame data privacy regulators for some of it. Sure, the threat of a global recession keeps marketers awake at night, but being named and shamed in headlines of The New York Times for data privacy breaches is the stuff of nightmares.
But until recently, those nightmares never materialized. After all, it was the platforms and ad tech vendors that were in headlines for data snafus, not advertisers.
Time, as ever, makes fools of everyone. In this instance, gradually then suddenly.
Before September, avoiding data privacy breaches was just another priority among others on a long list for marketers. Now, it’s a matter of urgency. In September alone, prominent advertisers Zillow, Expedia, Chewy.com and Lowe’s were hit with lawsuits for allegedly breaching privacy violations in the U.S.
If there was ever any doubt that lawsuits would come for advertisers that played fast and loose with people’s data, it’s fading quickly. Take Sephora, which agreed to pay $1.2 million in fines for selling customers’ data without their knowledge.
“Over the two months or so we’ve seen a lot more inbound interest from enterprise organizations looking to update their technology stacks in advance of the changes to data privacy laws in the U.S.,” said Brian Kane, chief operating officer at consent management platform Sourcepoint.
Companies like Sourcepoint were always going to see a swell in demand with or without the Sephora fine. They have vital interpretations and perspectives of big, imminent changes to data privacy regulation. Indeed, its going to look different at the turn of the year. This is when the California Privacy Rights Act — a beefed up version of the California Consumer Privacy Act — takes effect. And when this happens so too will the abolishment of the 30-day cure period given to businesses accused of violating the law. No cure period means the California Attorney General’s office can go straight to enforcement action. The Sephora fine was a reminder to marketers of what that means.
“The reality of a CEO calling you about a call they just received from a regulator is now very real for marketers,” said Ian Cohen, CEO of data privacy tech company LOKKER. “The idea that just because you can collect a bunch of data doesn’t mean you should is rigning true with a lot more marketers now. It’s not business as usual for a lot of marketers now.”
To be fair, marketers have always taken privacy seriously. In hindsight, maybe not as seriously as they could have. The reams of audits, policy shifts and data partnerships done over the last several years say as much. Even so, there’s more effort to do what is ethically right, not just legally possible — especially when enforcement actions from regulators come with public campaigns that position them as a champion of the consumer. It packs an extra punch.
“Some marketers are looking at the data they use to ensure it has been responsibly gathered, with adequate transparency and control for consumers,” said Tom Chavez, CEO of data control business Ketch. “They’re updating contracts with vendors, but more importantly, are using systems and infrastructure that protect privacy and enforce the permissions people place on their individual data.”
What once yielded a monetized asset for advertisers has now turned into a privacy liability. In this way, data privacy is like ESG in so far as advertisers must report not just their own policies, but the policies of their vendors. No mean feat for the marketers who still focus their dollars and operational decisions on a channel or platform as the common denominator for their decisioning, not on individuals or audiences.
Yes, they’ve got better at locking up personal data but many marketers continue with practices that are potentially no longer compliant. They largely have neither the knowledge nor understanding of how a patchwork of state and regional data privacy laws translates to practices on collecting digital identifiers on their owned and operated digital properties. As Dan Larden, head of U.K. at digital media consultancy Digital, explained: “We’ve seen a lot of non-compliant practices on large brand websites, where data collection is happening without the consent of the user for example.”
But the audit trail for marketers doesn’t stop there (remember, this is advertising). The third-party services marketers plug directly into their own sites, also use third parties, and these become fourth parties to a company. These fourth parties use other software, and these become fifth parties to a company, and so on. It’s a chain that can go over 20 layers deep, so the oversharing grows exponentially.
“Marketers aren’t just thinking about auditing the tags and third-parties on their own sites, they’re also starting to audit how other companies are collecting and using that data,” said Gabrielle Robitaille, senior digital policy manager at the World Federation of Advertisers. “They’re auditing third-parties. But in fairness it’s something that’s slowly gaining traction.”
It’s safe to say, though, that these sorts of audits will pick up. Turns out that getting a better view on the provenance of data is just the start of a much longer process. it’s just as important to know whether to hold on to that data too.
“If you’re drinking from your own data lake, you want to know that it’s safe to drink. The problem is that in digital advertisingg, tthat data comes from a thousand sources, and flows through many others before it gets to you. Its provenance quickly gets lost,” said Jamie Barnard, CEO of privacy compliance platform Compliant. “While the consent management platform is a vital tool, it is not the silver bullet — consent does not equal compliance.”
There aren’t many silver linings to be found. Marketers are going to make tough decisions, often that contradict their own long-held views of how personalized advertising works. All while hitting quarterly numbers in a downturn. But one welcome casualty should be a closer gap between data privacy plans that straddle the line between best practice and legal requirement better. What comes next should be a healthier focus on consumer protection in an age of online media.
We want to hear from you. Take this quick five-minute survey to help Digiday learn how to make our products even better and you’ll be entered to win one of five $25 Amazon gift cards.
Member ExclusiveDigiday+ Research: Instagram wins over Facebook for role in brands’ holiday marketing
Brands differ on how they use each marketing channel during the holidays -- even when it comes to sibling social media platforms Facebook and Instagram, Digiday+ Research found.
How — and why — Candy Crush is in the midst of a 10th anniversary brand refresh
In the years since Activision Blizzard acquired the Swedish game studio King in 2016, employees at the gaming giant have started to internally refer to their company as “ABK” — that is, Activision Blizzard King. But the corporation’s recent financial reports indicate that “KAB” might be a more accurate abbreviation.
Independent agency Goat invests in influencer strategy for clients as it expands in the U.S.
Everyone is after influencers to up their marketing game. But the secret to success, Goat contends, is in viewing influencers as performance media and using data to deliver clients guaranteed outcomes.
SponsoredHow brands are measuring incremental performance on CTV
Connected TV is unique among other advertising channels because it combines linear television’s storytelling capabilities with digital marketing’s targeting and measurement. As more marketers leverage CTV advertisements to reach relevant and engaged audiences, they also want to understand the real value they are generating with their investment. Incrementality reporting and measurement allow advertisers to measure […]
Marketers bring Web3 to the FIFA World Cup with augmented reality, NFTs and virtual worlds
The month-long tournament, which begins this weekend, will be the first World Cup since it took place in Russia in 2018 long before “Web3” entered the global lexicon. Now, official and non-official sponsors are hoping to harness the hype with a range of NFTs, virtual worlds, augmented reality tools and other trendy tech.
U-Haul diversifies its social strategy to tell people it’s more than moving trucks
In recent years, U-Haul's in-house agency has been working to "better leverage social media for brand loyalty."