RTB evidence

Selected evidence submitted to data protection authorities to demonstrate RTB’s GDPR problems

In September 2018, Brave initiated a campaign of formal GDPR complaints against Google and the IAB’s “real-time bidding system” (RTB), which leaks the personal data of Internet users hundreds of billions of times a day. This is a sample of the evidence submitted to European data protection authorities so far.

The campaign for GDPR action to fix the Google and IAB real-time bidding system now includes Brave, the Open Rights Group, Dr Michael Veale of the Turing Institute, the Panoptykon Foundation, Bits of Freedom, Eticas Foundation, Exigo, Dr Jef Ausloos of the University of Amsterdam, Pierre Dewitte of the University of Leuven, Liberties.eu, the Society for Civil Rights, Digitale courage, Digitale Gesellschaft, Netzwerk Datenschutzexpertise, Deutsche Vereinigung für Datenschutz, the Italian Coalition for Civil Rights and Freedoms, the Bulgarian Helsinki Committee, the Association for the Defense of Human Rights in Romania, the Italian Coalition for Civil Rights and Freedoms, the Estonian Human Rights Centre, the Peace Institute.

Click here to view updates on the RTB complaints.

Initial complaint submissions


What is “real time bidding”?


This report was submitted with the initial complaints.

What data are leaked in RTB broadcasts?

Failure of data protection in IAB OpenRTB system

Failure of data protection in Google Authorized Buyers RTB system

Data protection flaws in the IAB’s GDPR guidance.