BBB National Programs Archive
Accountability Program Bolsters Consumer Choice about Persistent ID, Location Use for Targeted Advertising
Arlington, VA – December 10, 2018 – The Online Interest-Based Advertising Accountability Program, an independent enforcer of the Digital Advertising Alliance’s self-regulatory Principles, released the results of inquiries into two advertising technology companies. The companies, Kiip and VRTCAL, updated their privacy disclosures and consumer opt-out tools to ensure that they met the requirements of industry best practices for interest-based advertising.
“Making opt-out tools easy to use and ensuring they are clearly described are essential components of the DAA Principles,” said Jon Brescia, Accountability Program Director of Adjudications and Technology. “We are pleased to see that Kiip and VRTCAL have taken this philosophy to heart.”
The Accountability Program routinely tests mobile apps for compliance with the DAA Principles. As part of this work, the Accountability Program tested a popular dating app, where it observed VRTCAL collecting user data—including precise location information—for IBA. Following a review of VRTCAL’s data collection practices and privacy disclosures, the Accountability Program found that the company did not meet the requirements for transparency and control under the Principles.
After receiving an Accountability Program inquiry letter, VRTCAL immediately indicated its strong support for consumer privacy and self-regulation and worked diligently to come into compliance fully with the DAA Principles.
• clarified its disclosures of its IBA business practices,
• revised its contracts to require that its partners get consumer consent before collecting precise location data through apps for IBA, and
• added instructions to its privacy disclosures explaining how to revoke location data permissions on smartphones.
Today’s second decision concerns the mobile advertising network Kiip, which the Accountability Program determined was collecting data through a popular exercise app. While similar in content to VRTCAL, the Kiip case is a continuation of the Accountability Program’s enforcement of the Cross-Device Guidance. These rules outline the industry standards for privacy when tech companies collect data across multiple devices associated with a single user, such as a laptop, smartphone, and tablet.
Today’s case release brings to 95 the public actions taken by the Accountability Program.