Call to Action on OBA

The Office of the Privacy Commissioner (OPC) is aware of the challenges associated with balancing privacy in the online advertising environment, and wants the ad industry to step up. On the day Privacy Commissioner of Canada Jennifer Stoddart announced the publication of a new set of guidelines on Privacy and Online Behavioural Advertising in late 2011, she said that:

[t]o best address these complexities, all stakeholders in the advertising community, including website operators and browser developers, have a role to play to ensure that the issues of transparency and meaningful consent are addressed.

The following year, the OPC followed up with more specific expectations in its Policy Position on Online Behavioural Advertising.

Industry Response: Self-Regulation

Led by the Digital Advertising Alliance of Canada (DAAC), the advertising industry has responded with the Canadian Self-Regulatory Program for Online Behavioural Advertising, with a website geared to consumers and companies alike at http://youradchoices.ca/. The Program is not quite "made-in-Canada", nor should it be, considering the need to integrate data governance solutions across borders. It is based on the U.S. Digital Advertising Alliance (DAA) OBA Ad Choices program and principles. It also shares some common principles and approaches with the European Advertising Standards Alliance (EASA) OBA Framework. For consistency and broad consumer recognition, the "Ad Choices" program in participating countries use the identifying icon consisting of a lower case letter "i" within a blue triangle.

The DAAC Program has been tailored to meet the requirements of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), as well as the OPC guidelines. The non-profit industry body Advertising Standards Canada (ASC) will be responsible for monitoring compliance, dealing with complaints, initiating investigations, and publishing reports. The OPC will no doubt be watching closely – particularly as the program takes its first steps in Canada – to come to its own conclusions on whether industry self-regulation is meeting its expectations under PIPEDA and its OBA guidelines. However, once the Program has matured and proved itself, there is precedent for a regulator to stand down and consider the self-regulatory body to be at least the "first resort" for complaints in the area. The Canadian Radio-television and Telecommunications Commission (CRTC) generally takes this position with the ASC's review of advertising standards.

The Canadian Self-Regulatory Program for Online Behavioural Advertising incorporates the following principles:

  1. Education [both individuals and businesses]
  2. Transparency [clear, meaningful, prominent notice to consumers]
  3. Consumer Control [the ability to exercise choice with respect to the collection, use and disclosure of data for OBA purposes]
  4. Data Security [safeguards, data retention, and treatment of OBA data]
  5. Sensitive Data [children and sensitive personal information]
  6. Accountability [accountability program is managed and operated by the ASC in accordance with its Online Behavioural Advertising Compliance Procedure]

Self-regulation does not, however, cover the whole OBA territory. Certain types of activities are expressly excluded from the Program, such as "online advertising of entities within a web site they own or control" and "contextual advertising", including ads based on the content of a web page being visited, a consumer's current visit to a web page, and a search query.

While legal compliance may have been the main driver for the implementation of the new Program, the DAAC also points to the benefits for consumers:

As an online consumer, you can find out more about online behavioural advertising and how it helps provide you with more relevant ads on the websites that you visit. You'll learn how online behavioural advertising supports the content, products and services that you use on the web, what online ad choices you have, and how to use browser controls to enhance your privacy.

In short, while the Office of the Privacy Commissioner has noted that some consumers find OBA "creepy", the DAAC and its member associations know that many consumers don't mind OBA as long as it's transparent: they don't want to see irrelevant ads, and they're OK with the idea of the right ads "finding them".

It's early days for the DAAC Program. As it rolls out and expands, Canadians will become increasingly familiar with the Ad Choices icon appearing on web pages. Advertisers – and the OPC - have a lot at stake in that little blue icon.

For more information, visit our Data Governance Law blog at www.datagovernancelaw.com

About Dentons

Dentons is a global firm driven to provide you with the competitive edge in an increasingly complex and interconnected marketplace. We were formed by the March 2013 combination of international law firm Salans LLP, Canadian law firm Fraser Milner Casgrain LLP (FMC) and international law firm SNR Denton.

Dentons is built on the solid foundations of three highly regarded law firms. Each built its outstanding reputation and valued clientele by responding to the local, regional and national needs of a broad spectrum of clients of all sizes – individuals; entrepreneurs; small businesses and start-ups; local, regional and national governments and government agencies; and mid-sized and larger private and public corporations, including international and global entities.

Now clients benefit from more than 2,500 lawyers and professionals in 79 locations in 52 countries across Africa, Asia Pacific, Canada, Central Asia, Europe, the Middle East, Russia and the CIS, the UK and the US who are committed to challenging the status quo to offer creative, actionable business and legal solutions.

Learn more at www.dentons.com

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances. Specific Questions relating to this article should be addressed directly to the author.