Coalition for Privacy Compliance in Advertising

Increasing certainty about privacy compliance in digital advertising

The Coalition for Privacy Compliance in Advertising (CPCA) is developing the first UK GDPR certification scheme for advertising technologies backed by regulators and embedding legal standards. CPCA will make it easier for all market participants to understand, and demonstrate compliance with, data protection requirements. The certification scheme is currently under development and we aim to launch it in the UK in 2025.

Working with the ICO and the industry

The Coalition for Privacy Compliance in Advertising is a non-profit organisation established to manage the UK GDPR certification scheme. It is being set up as a joint industry committee with various industry associations and consumer groups sitting on its Board. We will announce the participating associations in the coming months. The Coalition is working with the UK's Information Commissioner's Office, the DPO Center and the Audit Bureau of Circulation to advance the development of the certification scheme criteria and the related methodology for auditing the in-scope products and technologies.

Proving GDPR compliance is difficult

As a technology provider processing personal data, it isn't easy to show your prospects and partners that your products comply with privacy regulations.

Obtaining the certification will allow you to be one step ahead of the competition, making it easier for your publishers and advertiser clients to trust and use your products.

Reduces reliance on ad hoc questionnaires

Living in the grey area of compliance is a double-edge sword

Demonstrating compliance with data protection regulations reduces ongoing risks for your business. The CPCA certification will help align your business practices with data protection requirements and protect against growing enforcement actions.

Moreover, obtaining the certification can offer you better protection against adverse technical measures implemented by browsers and operating systems to protect privacy.

CPCA will seek to harmonise privacy rules across jurisdictions

By clarifying how data protection rules must be implemented in digital advertising, the CPCA certification scheme provides certainty and stability to the UK and European markets. But digital advertising is a global business and our goal is to help companies navigate the complex requirements of national and state laws.
‍
Greater clarity on compliance requirements will simplify your legal roadmap across jurisdictions, guide product decisions and lay strong foundations for future growth. We take on some legal work for you, so you can concentrate on building amazing products.

Global Ambitions

While the UK GDPR certification scheme will be based on the ICO Guidance and apply to companies doing business in the UK, the CPCA is committed to providing harmonised guidance across different jurisdictions.

We are already working to obtain a GDPR certification approved by the European Data Protection Board. We expect the UK and EU certification schemes to be similar, making it easy and cost-effective for companies to get a pan-European badge of compliance.

We are also looking at other countries where regulator-backed privacy certification schemes exist and we will lobby on behalf of the industry to promote cross-jurisdictional harmonisation of privacy norms.

Seeking regulatory approval for the first Privacy Certification Scheme for Digital Advertising

Developed with the ICO

Backed by the industry

Accessible to all companies

Commercial benefits