RTB evidence

Selected evidence submitted to data protection authorities to demonstrate RTB's GDPR problems

In September 2018, Brave initiated a campaign of formal GDPR complaints against Google and the IAB’s “real-time bidding system” (RTB), which leaks the personal data of Internet users hundreds of billions of times a day. This is a sample of the evidence submitted to European data protection authorities so far.

The campaign for GDPR action to fix the Google and IAB real-time bidding system now includes Brave, the Open Rights Group, Dr Michael Veale of the Turing Institute, the Panoptykon Foundation, Bits of Freedom, Eticas Foundation, Exigo, Dr Jef Ausloos of the University of Amsterdam, Pierre Dewitte of the University of Leuven, Liberties.eu, the Society for Civil Rights, Digitale courage, Digitale Gesellschaft, Netzwerk Datenschutzexpertise, Deutsche Vereinigung für Datenschutz, the Italian Coalition for Civil Rights and Freedoms, the Bulgarian Helsinki Committee, the Association for the Defense of Human Rights in Romania, the Italian Coalition for Civil Rights and Freedoms, the Estonian Human Rights Centre, the Peace Institute. 

Click here to view updates on the RTB complaints.

Click here to receive future updates and research notes in your inbox.

Initial complaint submissions


What is “real time bidding”?


What data are leaked in RTB broadcasts?

Failure of data protection in IAB OpenRTB system


Failure of data protection in Google Authorized Buyers RTB system



Data protection flaws in the IAB’s GDPR guidance.