The Interactive Advertising Bureau (‘IAB’) Europe announced, on 30 November 2020, that it had published, jointly with the Interactive Advertising Bureau UK, its Guidance on GDPR Data Protection Impact Assessments (DPIA) for Digital Advertising under GDPR. In particular, IAB Europe outlined that the guidance provides background and describes the Data Protection Impact Assessment (‘DPIA’) process in the context of processing data for digital advertising and real-time bidding purposes, in order to help companies understand their obligations and to comply with them in practice. In addition, IAB Europe highlighted that the guidance explains how to incorporate the DPIA process into a company’s normal course of product design and development. Moreover, IAB Europe noted that the guidance can be used by any organisation across Europe and can significantly facilitate compliance efforts when used in conjunction with the implementation of its Transparency and Consent Framework.
More specifically, the guidance addresses, among other things:
- what a DPIA is and when it is required;
- how to carry out a DPIA;
- a DPIA’s processes and stages; and
- risk assessments and analysis activities.
You can read the press release at this link.
