Digital Advertising Guidance: data security, retention & storage

Posted on: Monday 28 November 2022 | IAB UK

IAB UK has produced this guidance as part of our commitment to the ICO in our response to its investigation of real-time bidding. The guidance aims to help facilitate legal compliance, responsible data use, and accountability.

The purpose of this guidance is to help educate the digital advertising industry about the legal requirements relating to personal data security, retention and storage - helping companies to understand their obligations and how to comply with them in practice. It is intended as a high-level overview for companies engaged in digital advertising in the UK, based on relevant UK law - namely the UK GDPR, Data Protection Act 2018 (DPA 2018) and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR).

Part one of the guidance provides an overview of organisational and technical security measures that can help enable companies in the digital advertising industry to comply with their personal data security obligations. Part two details specific examples of appropriate security measures in different industry contexts, including practical guidance on risk assessments and how to determine personal data retention periods.

Please note that nothing in this guidance, or any accompanying documentation or resources, constitutes legal advice. Following the guidance is no guarantee of compliance. Companies remain responsible for their own compliance with applicable laws and industry self-regulatory rules, so should take their own legal advice where necessary. 

Written by



Related content

John Whittingdale: Online advertising brings huge opportunities for SMEs

IAB UK hosted a Parliamentary Reception in December 2022 to inform MPs about the valuable role digital advertising plays in supporting small businesses...

Learn more

HFSS online ad ban postponed to 2025

The Government has moved the implementation of the HFSS online ad ban to 2025, following lobbying from the IAB, our members and industry partners  

Learn more
Row of people using smartphones

CMA releases guides for platforms, brands & influencers on paid promotions

The Competition & Markets Authority (CMA) has worked with the Advertising Standards Authority (ASA), Ofcom, social media companies and content creators...

Learn more

2022 Party Conferences: what we took away

Following the Conservative and Labour Party Conferences last month, here is a summary of the key themes from each that are relevant to the digital ad...

Learn more

Why digital advertising works

Discover why digital advertising is effective for reaching your customers and building brands.