Digital advertising guidance: special category data under the GDPR
Posted on: Monday 15 June 2020
What is special category data, how might it arise in digital advertising, and what are the restrictions on its processing under the GDPR?
As part of our work to address the ICO’s concerns about ad tech and real-time bidding, we have developed this guidance on special category data, to help companies understand their obligations, and how to comply with them in practice.
The guidance aims to help educate the digital advertising industry about:
What ‘special category data’ is, as defined in the GDPR (including how it may arise from the way in which other data is processed)
The legal provisions and requirements that apply to processing special category data
Factors to consider in reviewing whether there is a risk of special category data arising or being inadvertently processed as part of your activities, and how to minimise such risks
You can download the guide below.
We are also developing other work related to special category data. Read about it here.
If you have any questions about this work, please email email@example.com.
Digital Advertising Guidance: DPIAs under the GDPR
Data protection impact assessments: When are they required? And what does a good DPIA process look like for the digital advertising industry?Learn more
The Broken Privacy Shield: What to do now
Any company that has been relying on the EU-U.S. Privacy Shield Framework to transfer personal data from the UK to the U.S. will no longer be able to do...Learn more
Webinar: Update on IAB UK’s response to the ICO report
In December, we published our response to the ICO’s ‘Update report into adtech and real time bidding’, setting out our plan for action in six key areas...Learn more
June 2020 update on our Special Category Data work
As we launch our guide to special category data under the GDPR, find out what else we’re doing in this area to help members understand and minimise...Learn more