Egta Insight the Future of Online Advertising Without 3Rd Party Cookies May 2020
Total Page:16
File Type:pdf, Size:1020Kb
EU affairs egta insight the future of online advertising without 3rd party cookies May 2020 www.egta.com table of contents 5 Introduction: The end of 3rd party cookies 6 Part 1: Impact of the end of 3rd party cookies – use cases 7 Part 2: Technical alternatives to 3rd party cookies 7 1.1 Google’s Privacy Sandbox 10 1.2 W3C – ‘Improving Web Advertising’ Business Group 10 1.3 IAB US – Project Rearc 12 Conclusion and egta advice legal notice This publication has been researched and produced by egta’s EU affairs department, and it draws inspiration from the open sources, egta materials and databases, conversations with industry experts and literature from multiple sources. Whilst every effort has been made to ensure the accuracy of the information in publication, egta does not accept responsibility for possible errors or omissions. The opinions and analysis expressed in the publication are those of egta and do not necessarily reflect the views of the other parties. fora are discussing coordinated approaches to Introduction: introduce technical alternatives in support of THE END OF 3rd party targeted advertising (see third section). COOKIES In January 2020, Google confirmed in a blog post that it would phase out the use of 3rd party cookies in its browser Chrome within 2 years. With over 60% of the global browser market, the Chrome announcement, in addition to similar moves by Safari and Firefox, means that by January 2022, 3rd party cookies will be de facto impossible to use across the web. Why did Google feel compelled to make such a move? Chrome essentially found themselves between a rock and a hard place. With privacy concerns and the associated regulatory pressure increasing and virtually everyone else addressing cross-site tracking forcefully (Safari, Firefox, Edge more recently, as well as other niche browsers such as Brave), Chrome was faced with the choice of either reacting in kind or running the real risk of losing significant market share. Google’s primary source of revenue is data/advertising, therefore, doing nothing was never an option, meaning that Google had to adapt to the new world, hence the announcement and envisioned timeline. Because of Google’s business model they cannot adopt the same approach as the other browsers. They have taken the conversation about future alternative models to the worldwide web consortium (W3C), the only forum where they can hope to control the conversation and achieve consensus with other browsers while also advocating for measures which are friendlier to the ecosystem than further indiscriminate blocking implemented by other browsers. Preventing cross-site targeting through the use of 3rd party cookies could have profound effects on the internet ecosystem, which we will assess in the second section. This is why different industry Page 5 cost-per-view). In the context of video advertising Part 1: – the notion of view and the viewability criteria will IMPACT OF THE END OF become central pillars of the new system. The RD need for transparency driven by an independent 3 PARTY COOKIES data verification and auditing will also play a pivotal – USE CASES role in this new reality. In the absence of third-party cookies, walled The phasing out of, and eventual end of, third- gardens will offer attribution within their publishing party cookies will have significant consequences domain, to the advantage of big data owners, who for the entire ad tech ecosystem, not least for can provide the most consistent audience profiling. broadcasters – in particular when it comes to With the advances in automation on individual audience targeting, audience measurement, publisher networks, there will be a greater need for attribution and conversion measurement in digital machine-learning-based attribution techniques advertising. that quantify the brand-building efforts. A cross industry concern is that initiatives such as Everything else from analytics to conversion Google’s Privacy Sandbox (see the next section measurement, fraud prevention, product for more details) could accentuate the existing improvement and bot detection will be affected dominance of the walled gardens. Global ad tech by the new post-cookie reality. Not to mention the players (e.g. GAFA) might further consolidate logical resurgence of contextual advertising. their dominance in the advertising market as they will have full control over user data. Such To sustain their revenue streams, many online large players may require that their advertising publishers (including broadcasters) will have partners (publishers and buyers) load all of their to intensify their efforts to develop effective data related to their campaigns into the sandbox data strategies and activate their audiences. while giving them very limited access to campaign The development of clear and effective consent results (which might also not be independently mechanisms will become a must for all online verified). Using rich consumer profiles at a people- publishers. Furthermore, in a cookie-less world, based level, mega-platforms will offer unrivalled those TV companies with video extensions in addressability, and in doing so, make it even harder their portfolios will be one of the few actors with for smaller publishers to stand out. This may have qualitative audience data (accurate, consent-based negative effects on the transparency of ad buy information). transactions and reporting. To take full advantage of this strategic shift, online The end of cookies will heavily impact the way publishers and broadcasters will have to focus on the ad industry measures ad performance of educating media buyers on the opportunities that campaigns across different publishers’ websites. a world without third-party cookies offers, and the Measurement tools that rely on third-party cookies benefits of the premium first-party data at their will be disrupted. Optimisation, frequency capping disposal. and setting across multiple walled gardens and publisher outlets will have to be based on different tools. With engagement planning, CPM-based buying will most likely transition into models that focus more on users’ actions/engagement (e.g. Page 6 Part 2: a. Structure In theory, the project is ‘open to all’ however the TECHNICAL ALTERNATIVES process is entirely at the discretion of Google, with TO 3RD PARTY COOKIES little information with regards to the timeline, for example. Today, much of the programmatic industry is b. Technical solutions fundamentally built upon third-party cookies. The end of the 3rd party cookie therefore raises The Privacy Sandbox revolves around two major concerns over the industry’s future and in principles: particular over publisher’s capacity to monetise • removing all unique identifiers (as opposed to their content, given the steep revenue declines project Rearc), therefore not allowing cross-site seen when Safari’s Intelligent Tracking Protection tracking; was first introduced. • centralising user data (such as interests, To avoid a dramatic drop in advertising revenue, ad seen/clicked, conversion data, or web different initiatives have emerged to consider browsing behaviour) into the browser where alternatives to the existing online advertising it will be stored and processed in a protected model. environment. The current industry discussions are taking place The browser could then allow access to this through three main fora/initiatives which we have “sandbox” in a granular way for parties that the summarised below: user trusts (publisher, advertiser) and in a more • Google’s Privacy Sandbox; controlled way for parties that the user does not trust directly (trusted parties of the 1st parties). • The World Wide Web Consortium (W3C) Improving Web Advertising’ Business Group; Google has proposed several tools to implement these principles, attached to different business use • The Internet Advertising Bureau’s Project Rearc. cases: 1.1 Google’s Privacy Sandbox Advertising and real-time bidding: Google’s Privacy Sandbox was originally announced The FLoC (Federated Learnings Of Cohorts) in a blog post from August 2019. This initiative proposal focuses on people’s general interests was meant “to develop a set of open standards to (“show this ad to Classical Music Lovers”) while fundamentally enhance privacy on the web”, “a secure TURTLEDOVE (Two Uncorrelated Requests, Then environment for personalization that also protects Locally-Executed Decision On Victory) looks at user privacy”. marketing based on specific previous actions the At the time, Google was trying to respond to person has taken (e.g., “offer a discount on some uncoordinated moves by competing browsers shoes that you left in a shopping cart”). (Safari, Firefox) to prohibit the use of third-party • Interest-based marketing – FLoC: in this cookies while sustaining the online advertising model, the browser itself determines interest ecosystem on which its revenue (and the revenue categories and allows advertisers access to of the majority of online publishers) relies. those. Advertisers and ad networks have no control over what groups people are in. The Page 7 browser groups together flocks of “similar Another major change is that ad auctions would people”, with wide latitude in how it comes up be executed at browser level instead of on a with its notion of similarity. server/ad exchange. • Remarketing – TURTLEDOVE (previously known Within this work stream, Google is also as PIGIN – Private Interest Groups Including considering measures to allow exclusions Noise): the Turtledove solution would centralise (preventing an ad from being displayed, e.g. 1st party information on which category a user once a user has bought a product). belongs to into the browser. This category can Ad conversion measurement: later be revealed to trusted ad networks of the 1st party through two uncorrelated ad requests • Aggregate reporting API: data for reporting which could take place at different times: would be collected by the browser, not by 3rd parties. 3rd parties would only get an aggregated - A contextual ad request: the web page’s report sent by the browser, not the individual “normal” ad request to the ad network data points.