In This Article:
* Personalised advertisements still being sent without consent
* Regulators yet to clamp down on new GDPR law
* GRAPHIC-How new regulation works: http://tmsnrt.rs/2DhT0XL
By Paresh Dave
SAN FRANCISCO, July 2 (Reuters) - Businesses engaged in online advertising are taking divergent approaches to a new European data protection law, with some shutting services to ensure compliance while others test the limits of what regulators will allow, a Reuters review shows.
Some major websites continue to deliver targeted advertisements to users in Europe who have not given consent for their personal information to be used, according to advertising industry sources, owners of major websites and a Reuters review of about 10 websites.
Such consent is a central element of the new General Data Protection Regulation (GDPR), but some websites and advertising software vendors contend that consent can be bypassed legally --and with the law only a month old, regulators have yet to weigh in.
Gabriel Voisin, an London-based attorney following GDPR at international law firm Bird & Bird, said that limited enforcement of consent requirements is enabling companies to push the line.
"Saying 100 percent of ad inventory is properly obtained at the moment is a massive overstatement," he said, referring to advertising space for sale.
Somewhere between 10 percent and 30 percent of European consumers are refusing to consent to personalised ads when given the choice, four advertising industry executives told Reuters, citing their companies' internal data.
HIGH STAKES
The stakes are high in Europe's $22 billion online display advertising market because websites and apps can charge advertisers as much as 10 times more when ads can be targeted using factors such as an individual's browsing history or precise location.
Companies risk fines of as much as 4 percent of their revenue for GDPR violations.
German media company Axel Springer has not sought user consent for targeted ads on properties such as news website Bild, citing an exception in the law for when a company has a "legitimate" business interest.
Regulators have said fraud prevention or marketing can fit the definition, provided that any privacy affect on consumers is limited, reasonably expected and likely to be accepted.
"Axel Springer takes the view that the use of certain tracking technologies in Germany continues to be allowed without prior consent – as long as users can opt out and provided there is a legitimate interest," an Axel Springer spokesman said.
Newspapers owned by Britain's Reach, including the Ealing Gazette and Grimsby Telegraph, loaded personalised ads before seeking users' consent, according to a Reuters review on June 28.