ARTICLE
28 April 2021

Targeted Advertising On Social Media And GDPR

GA
Global Advertising Lawyers Alliance (GALA)

Contributor

With firms representing more than 90 countries, each GALA member has the local expertise and experience in advertising, marketing and promotion law that will help your campaign achieve its objectives, and navigate the legal minefield successfully. GALA is a uniquely sensitive global resource whose members maintain frequent contact with each other to maximize the effectiveness of their collaborative efforts for their shared clients. GALA provides the premier worldwide resource to advertisers and agencies seeking solutions to problems involving the complex legal issues affecting today's marketplace.
Do you target your advertising on social media platforms? (Of course, you do). Then you should know that you may be responsible for compliance with personal data processing along with the social media operators.
European Union Media, Telecoms, IT, Entertainment
To print this article, all you need is to be registered or login on Mondaq.com.

Do you target your advertising on social media platforms? (Of course, you do). Then you should know that you may be responsible for compliance with personal data processing along with the social media operators. But what exactly are you responsible for and what are your obligations?

Thanks to social media, marketers have the ability to target individuals, in order to communicate their tailor-made advertising messages, on the basis of a wide range of criteria. Targeted advertising can be based on personal data actively provided by the users or observed or inferred, either by the social media provider or by third parties and collected (aggregated) by the social media platform or by other actors (e.g. data brokers).

Due to the development of sophisticated targeting mechanisms, the targeting of social media users may involve a variety of different actors. Interaction between social media providers and such other actors may give rise to joint responsibilities under EU data protection law.

In order to clarify the roles and responsibilities of social media providers, "targeters" and other actors of the targeted advertising process, EDPB now adopted a final version of the Guidelines on the targeting of social media users (Guidelines).

The Guidelines follow up on previous CJEU case law and offer guidance concerning the targeting of social media users, in particular in regards to the responsibilities of targeters and social media providers. Where joint responsibility exists, the Guidelines seek to clarify what the distribution of responsibilities might look like between targeters and social media providers on the basis of practical examples.

Although EDPB observes that targeters who wish to use targeting tools provided by social media providers are usually offered only 'take it or leave it' conditions of the social media platforms, the EDPB considers that it does not negate the joint responsibility of the social media provider and the targeter and cannot serve to exempt either party from its obligations under the GDPR.

If you are a "targeter", the Guidelines should help you understand what legal basis is appropriate for you and which part of the data processing exactly are you responsible for. The Guidelines are now available online on the EDPB website.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See More Popular Content From

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More