Information Commissioner's Office
Blog: Adtech fact finding forum shows consensus on need for change
Blog posted by: Simon McDougall, 07 March 2019.
There’s a well-quoted line from Steve Jobs, that as Apple CEO he didn’t employ smart people to tell them what to do, but so that they could tell him what to do.
It was a line that came to mind as I looked round the busy room yesterday at the ICO’s adtech fact finding forum.
We had more than a hundred people with something to say about adtech, from publishers to advertisers, from civil society to start-ups, from adtech firms to lawyers. As the regulator, I’m delighted we could bring so many smart and engaged people together, prompted by concerns about how people’s personal data is used in real-time bidding in programmatic advertising. And while we weren’t there to be told what do, we were certainly there to listen: to better understand the challenges and views of the different aspects of a complex system.
One thing that struck me was the amount of engagement from the different parties in the room. Anyone familiar with where adtech meets data protection will know that there are tensions. Several EU data protection agencies are looking at complaints suggesting aspects of the system used to present real-time personalised adverts do not comply with GDPR. But what I saw yesterday was constructive discussion and a definite willingness to find a way for the system to work for everyone, including - crucially - consumers.
There were clearly distinct views on specific aspects. How much personal data, if any, is necessary for the system to function effectively? Could consumers ever be given enough information to understand what’s happening to their data? Is there a lawful basis for processing data that can be consistently applied across the whole ecosystem? These are complex issues, and it is unlikely that there are straightforward answers.
However there was a consensus in the need for improvements. The sophistication of the technology needed to sell these online adverts to the highest bidder in real time is remarkable. But there was an acceptance that it is imperfect, and that improvements are needed for it meet the expectations of today’s laws. Discussions included improvements already in train as well as more sweeping changes that could follow further down the line, and all were considered in a positive and pragmatic way.
From the regulator’s perspective, we know we have more work to do. We need to absorb the views shared yesterday, and have invited attendees to provide any further reflections and comments on the day’s discussion in a brief email. We would also be happy to accept comments from those who could not attend, again limited to 1,000 words, by the end of next week (just email them to email@example.com).
Most of all, we want to benefit from the smart people who shared their views with us yesterday, as well as the smart people we are fortunate to have working at the ICO, to help us find the right way forward. Thanks to all involved!
Simon McDougall is Executive Director for Technology Policy and Innovation at the ICO where he is developing an approach to addressing new technological and online harms. He is particularly focused on artificial intelligence and data ethics.
He is also responsible for the development of a framework for auditing the use of personal data in machine learning algorithms.
Latest News from
Information Commissioner's Office
ICO call for views on the application for powers under the Proceeds of Crime Act11/11/2019 09:10:00
The Information Commissioner invites views on her office being granted access to investigation and other associated powers under the Proceeds of Crime Act 2002 (POCA).
Information Commissioner reminds political parties they must comply with the law ahead of General Election06/11/2019 09:10:00
The Information Commissioner has sent the following letter to the political parties in relation to the use of data in political campaigning.
Blog: Live facial recognition technology – police forces need to slow down and justify its use31/10/2019 13:10:00
Blog posted by: Elizabeth Denham, Information Commissioner, 31 October 2019.
Statement on an agreement reached between Facebook and the ICO30/10/2019 15:10:00
In 2017 the Information Commissioner's Office ("ICO") commenced a formal investigation into the misuse of personal data in political campaigns.
Blog: Embedding accountability – we want to hear from you29/10/2019 13:20:00
Blog posted by: Ian Hulme, Director for Regulatory Assurance, 28 October 2019.
AI Auditing Framework Call for Input: final considerations and next steps29/10/2019 09:10:00
As the initial Call for Input into the development of the ICO AI Auditing Framework comes to an end, Simon McDougall, Executive Director for Technology and Innovation, reflects on some of the overarching themes that have emerged in the first phase of our work.
Data Protection Impact Assessments and AI24/10/2019 10:20:00
Simon Reader, Senior Policy Officer, discusses some of the key considerations for organisations undertaking data protection impact assessments for Artificial Intelligence (AI) systems.
Blog: How coming to work at the ICO on a secondment can benefit both of us22/10/2019 15:05:00
Blog posted by: Simon McDougall, ICO Executive Director for Technology and Innovation, 22 October 2019.