For Brussels Technology Days 2014. Describing the need for cross-device and cross-service consent. With a summary of a possible solution.

1. COOKIE CONSENT IS BROKEN
AND THE LAW CANNOT FIX IT
THE BRUSSELS TECHNOLOGY DAYS – 16 OCT. 2014
L E O P O L D M E I J N E N O O S T E R B A A N
A D V O C A T E N

2. 2
USER SITE

3. INFORMATION AND CONSENT
3

4. WE DO THIS;
ARE YOU O.K. WITH THAT?
4

5. 5

6. 6

7. 7
USER SITE
PROVIDER 1
PROVIDER 2
PROVIDER 3

8. 8
USER SITE PROVIDER 1
(SSP)
PROVIDER 2
(DSP)
ADVERTIZER

9. 9
USER SITE PROVIDER 1
(SSP)
PROVIDER 2
(DSP)
ADVERTIZER

10. 10
USER SITE PROVIDER 1
(SSP)
PROVIDER 2
(DSP)
ADVERTIZER
PROVIDER 3
ANALYTICS
PROVIDER 4
AB/MV TESTING
PROVIDER 5
EXCHANGE
PROVIDER 6
TAG MGMT
PROVIDER 7
CRM
PROVIDER 8
ANALYTICS

15. 15
USER
DEVICE 1
SITE PROVIDER 1
(SSP)
PROVIDER 2
(DSP)
ADVERTIZER
PROVIDER 3
ANALYTICS
PROVIDER 4
AB/MV TESTING
PROVIDER 5
EXCHANGE
PROVIDER 6
TAG MGMT
PROVIDER 7
CRM
PROVIDER 8
ANALYTICS
USER
DEVICE 2
USER
DEVICE 3

16. 16

18. CROSS-SERVICE MARKETING
NECESSITATES
CROSS-SERVICE CONSENT
18

19. CROSS-DEVICE MARKETING
NECESSITATES
CROSS-DEVICE CONSENT
19

20. DECENTRALIZED CONSENT STATE MANAGEMENT
(AND SYNDICATED INFORMATION PROVISION)
PRO:
CENTRALIZED COOKIE AND PERSONAL DATA INFORMATION
CENTRALIZED CONSENT: OPT-IN ONCE, OPT-IN ANYWHERE
CENTRALIZED REGULATORY COMPLIANCE
NO RISK OF STEALING OF USERS
LOWERS BARRIER TO ENTRY
CON:
REQUIRES TRUST. SOLVED BY SELF-REGULATION?
OPT-IN OR OPT-OUT? NOT CONSISTENT ACCROSS COUNTRIES?
NEEDS LEAD-BY-EXAMPLE ADAPTORS?
20

21. 21

22. 22
ABOUT Olivier Oosterbaan
advocaat / attorney-at-law
admitted to the New York bar
Leopold Meijnen Oosterbaan
Amsterdam
oosterbaan@lmoadvocaten.nl
@Ooosterbaan