Alexandre Nderagakura

About Online marketplaces in CJEU ruling :
- Is Data controller (GDPR) in user-generated ads on its platform
- Responsible for ensuring that personal data in ads is identified and verified before publication
- Obtain consent from anyone identified in ads

curia.europa.eu/jcms/upload/...

Just received that in the app. LinkedIn asking the user to choose how the ads can be displayed

To resume discussion between EU council and parliament on chat control :
- No encryption backdoors
- No mandatory scanning
- Min age 16 for social media, video platforms, and AI companions
- Dev age-verification app and the EU digital ID (eID) wallet

www.europarl.europa.eu/news/en/pres...

CNIL (french DPA) insights on French attitudes toward data use and ad consent :
- 65% willing to sell their data (among, 6% would sell for < 1€ and 14% for > 200 euros per month)
- 35% wouldn’t sell their data even at any price

www.cnil.fr/en/monetisat...

Europe’s cookie nightmare is crumbling The seven-year nightmare is nearly over

EU preparing to allow users to set their preferences for cookies at browser level but:
- User consent must be site specific
- Per browser: a login, an ID?
- What about the CMP doing it?
In any case, the topic will come back to site specific or cross-site

www.theverge.com/news/823788/...

A Publisher Made Just $174 From AI Crawlers. It Could Change the Industry. Three years since the debut of ChatGPT, 99% of publishers have yet to see a penny.

Interesting experiment from criteo and raptive using a real time bidding infrastructure where an AI crawler paid for access to content www.adweek.com/media/publis...

IAB Tech Lab Launches Device Attestation Support in Open Measurement SDK to Combat Device Spoofing /PRNewswire/ -- IAB Tech Lab, the global digital advertising technical standards-setting body, announced today the release of Device Attestation support in the...

IAB Tech Lab launches Device Attestation in OM SDK. The approach involves adapting the Privacy Pass protocol (token system that privately verifies identity and proves authenticity) for a digital advertising verification use case

www.prnewswire.com/news-release...

EU commission is is in advanced talks for recognizing "legitimate interest" as legal basis for training AI with personal data under the GDPR. Following that, the challenge will be the accountability

www.mlex.com/mlex/article...

Data Standards for the Agentic Age Following a donation from Liveramp, IAB Tech Lab launches agentic standards starting with the open-source User Context Protocol (UCP)

LiveRamp donated User Context Protocol (UCP), enabling IAB Tech Lab to let AI agents in advertising and marketing interoperate via the exchange of signals (identity, contextual and reinforcement info), using federated learning for privacy
iabtechlab.com/data-standar...

The French AdTech Criteo preparing a move to the US. It’s concerning to see that you must relocate in order to get the flexibility you want/need regarding your business wmediaresearch.com/2025/10/29/c...

HTTPS by default One year from now, with the release of Chrome 154 in October 2026, we will change the default settings of Chrome to enable “Always Use Secu...

In one year, with the release of Chrome 154 in October 2026, Google will change the default settings of Chrome to enable "Always Use Secure Connections". Chrome will ask for the user's permission before the first access to any public site without HTTPS security.googleblog.com/2025/10/http...

According to Forrester in 2026 :
- Open web will loose 30% of ad revenue as users shift to AI generated summaries and answers, including CTV, streaming audio, social video...
- AI-driven privacy breaches will lead to a 20% rise in class-action lawsuits.

www.businesswire.com/news/home/20...

Apple could disables App Tracking Transparency (ATT) due to some conflicts (lawsuits etc...) www.macrumors.com/2025/10/23/a...

Clarification from Prebid about Transaction id (TID) :
- Prebid.js v10.9 (Aug 2025) lets publishers choose between global or SSP-specific TIDs.
- Future updates will offer more control, while earlier versions continue using global TIDs prebid.org/prebid-org-c...

Amazon launches AWS RTB Fabric to run Real-time bidding (RTB) with partners, reducing 80% of cloud networking cost and lowering latency for partners aws.amazon.com/rtb-fabric/

MRC (Media Rating Council) clarifies that Ad Verification vendors offering Property-Level services based on keywords and context can't position these services as "Brand Safety" unless they meet content-level standards for images, video, and audio mediaratingcouncil.org/sites/defaul...

While CHIPS and FedCM will keep running including Private State Tokens, a lot of Privacy Sandbox Technologies will be retired by Google privacysandbox.com/news/update-...

Built on top of OpenPath and OpenAds, PubDesk (a tool for publisher) is the new publisher-facing dashboard from The Trade Desk (TTD) to help publisher better align with buyer demand www.adexchanger.com/publishers/i...

California Privacy Protection Agency (CPPA)

Starting January 2027, California will become the first state to require browsers to provide users a simple, built-in way to block the sale or sharing of their personal data (e. g. GPC Global privacy control) cppa.ca.gov/announcement...

Microsoft and Amazon Ads announce supply exchange partnership Microsoft has announced Amazon DSP as the preferred transition partner for Microsoft Invest customers. Learn more.

Microsoft has announced Amazon DSP as its preferred transition partner for Microsoft Invest customers, as part of its strategy to transition away from media buying through their DSP. The transition will begin immediately advertising.amazon.com/library/news...

Online Identity Verification with the Digital Credentials API The rise of e-commerce in the past decade changed the way customers interact with businesses online, leading to new innovations and improved user experiences.

Starting in Safari 26 on macOS 26, iOS 26, and iPadOS 26, Apple introduces Web Support for the Digital Credentials API. This means websites can now request mobile IDs from Apple Wallet and third party Wallets webkit.org/blog/17431/o...

Mozilla Taps Index Exchange as First Programmatic Partner Marketers using the new platform will be able to reach large, engaged audiences in respectful, brand-safe environments.

Mozilla is bringing programmatic advertising to Firefox. Advertisers will get access to Mozilla’s Firefox New Tab audience, an inventory available exclusively through Private Marketplace (PMP) deals via Index Exchange www.adweek.com/media/mozill...

Microsoft reportedly mulls ad-infested free Xbox Cloud Gaming plan — Game Pass Ultimate subscriber allegedly catches ad during game loading Public tests coming very soon.

Microsoft is working on a free Xbox Cloud Gaming version with ads :
- Two min preroll ads before a game is ready to stream
- A time limit of 1 hour for sessions, and it only provides up to 5 hours for free per month

www.tomshardware.com/video-games/...

Europe’s cookie law messed up the internet. Brussels wants to fix it. The European Commission wants to take a bite out of privacy rules that force websites to run cookie banners.

EU is considering reforms to simplify cookie rules, allowing users to set preferences once (e.g. in browser settings) or removing consent for harmless cookies like basic stats. It would be a win for browsers, publishers, advertising and adtech www.politico.eu/article/euro...

Amazon to pay FTC historic $2.5 billion settlement for allegedly tricking customers into signing up for Prime | CNN Business Amazon is paying a “historic” $2.1 billion settlement with the Federal Trade Commission, it announced, ending a 2-year dispute over allegations that the company tricked millions of consumers into sign...

Amazon will pay a $2.5 billion fine. When dark pattern tricks consumers into subscription and make cancellation intentionally difficult... Now US hits harder than EU?

www.cnn.com/2025/09/25/t...

Go behind the browser with Chrome’s new AI features Google Chrome is getting upgraded with the latest AI to make it safer, smarter and more useful

Google is rolling out Gemini in Chrome. AI (artificial intelligence) part of the browser to explain webpages or perform task like booking a haircut or groceries blog.google/products/chr...

The French government has published its proposed governance framework for AI (artificial intelligence), detailing the roles of national authorities in monitoring and enforcing AI regulation www.entreprises.gouv.fr/priorites-et...

Countries : Implementing regulations that require age verification for accessing sensitive content online
Telecom companies : Offering built-in VPN services at no extra cost as part of mobile plans (e.g. Free Mobile in France)

www.iliad.fr/media/CP_160...

EDPB guidelines on the interplay between the Digital Services Act (DSA) and GDPR out for public consultation until 31 October. They outline rules for lawful personal data use in content moderation, advertising, recommender systems & child protection www.edpb.europa.eu/news/news/20...

The CJEU ruling in the the EDPS vs SRB case :
- Pseudonymized data is not always considered personal data
- Personal opinions are linked to the individual and count as personal data
- Recipients cant share pseudonymised data with parties able to reidentify

curia.europa.eu/juris/docume...