Alexandre Nderagakura

🚨 #OpenToWork : From Sept 30, I'm looking for my next challenge 👨‍🍳 Today's menu: 🥗 Starter : 10+ years in AdTech 🍝 Main : Programmatic, OpenRTB, Privacy... A request? Just ask 🍰 Dessert : Complexity in, sweet results out. Ping me or share my profile www.linkedin.com/in/alexandre...

Bug or Not, with The Trade Desk blocked on iOS Safari we can see : the impact of a browser, no regulation, I wonder which platform the buyers are using to compensate www.adexchanger.com/platforms/ap...

CNIL (french DPA) clarifies email tracking pixels : - Consent is required in most cases, with narrow exemptions for transactional emails - Transparency and easy opt-out are mandatory www.cnil.fr/fr/recommand...

The European CMP Association (ECMPA), the European federation of Consent Management Platforms (CMPs), has officially been established, based in Bruxelles www.mind.eu.com/media/articl... cc @chiareta.bsky.social

CNIL (french DPA) announces that a publisher may offer a single cross-device cookie choice to reduce consent fatigue, but the user must be clearly informed. When logging in on a new device, a notification banner may replace a full consent banner www.cnil.fr/fr/cookies-e...

Considered as a "hybrid service comprising features of private messaging and of an online platform", EU Commission has designated WhatsApp as a Very Large Online Platform (VLOP) under the Digital Services Act (DSA). They have 4 months to comply with DSA digital-strategy.ec.europa.eu/en/news/comm...

Belgian Market Court about IAB Europe vs APD : - Scope limited to joint controllership over TC Strings only - APD must reassess action plan within this scope - APD violated IAB Europe's right to be heard - No role for complainants in action plan validation iabeurope.eu/iab-europe-w...

A paper on "Code as personal data", reminded me of a couple of things I always say about coding which are : It can be considered as an Art and it could identify someone or something (with a privacy focus). My Linkedin post => www.linkedin.com/posts/alexan...

Texas is suing Sony, Samsung, LG, Hisense, and TCL (based on China) for collecting personal data through Automated Content Recognition ("ACR") technology without the user’s knowledge or consent. After TikTok, now CTV to be blocked in US? texasattorneygeneral.gov/news/release...

Any chance I get my LinkedIn review with SpotifyWrapped?

About Online marketplaces in CJEU ruling : - Is Data controller (GDPR) in user-generated ads on its platform - Responsible for ensuring that personal data in ads is identified and verified before publication - Obtain consent from anyone identified in ads curia.europa.eu/jcms/upload/...

Just received that in the app. LinkedIn asking the user to choose how the ads can be displayed

To resume discussion between EU council and parliament on chat control : - No encryption backdoors - No mandatory scanning - Min age 16 for social media, video platforms, and AI companions - Dev age-verification app and the EU digital ID (eID) wallet www.europarl.europa.eu/news/en/pres...

CNIL (french DPA) insights on French attitudes toward data use and ad consent : - 65% willing to sell their data (among, 6% would sell for < 1€ and 14% for > 200 euros per month) - 35% wouldn’t sell their data even at any price www.cnil.fr/en/monetisat...

EU preparing to allow users to set their preferences for cookies at browser level but: - User consent must be site specific - Per browser: a login, an ID? - What about the CMP doing it? In any case, the topic will come back to site specific or cross-site www.theverge.com/news/823788/...

Interesting experiment from criteo and raptive using a real time bidding infrastructure where an AI crawler paid for access to content www.adweek.com/media/publis...

IAB Tech Lab launches Device Attestation in OM SDK. The approach involves adapting the Privacy Pass protocol (token system that privately verifies identity and proves authenticity) for a digital advertising verification use case www.prnewswire.com/news-release...

EU commission is is in advanced talks for recognizing "legitimate interest" as legal basis for training AI with personal data under the GDPR. Following that, the challenge will be the accountability www.mlex.com/mlex/article...

LiveRamp donated User Context Protocol (UCP), enabling IAB Tech Lab to let AI agents in advertising and marketing interoperate via the exchange of signals (identity, contextual and reinforcement info), using federated learning for privacy iabtechlab.com/data-standar...

The French AdTech Criteo preparing a move to the US. It’s concerning to see that you must relocate in order to get the flexibility you want/need regarding your business wmediaresearch.com/2025/10/29/c...

In one year, with the release of Chrome 154 in October 2026, Google will change the default settings of Chrome to enable "Always Use Secure Connections". Chrome will ask for the user's permission before the first access to any public site without HTTPS security.googleblog.com/2025/10/http...

According to Forrester in 2026 : - Open web will loose 30% of ad revenue as users shift to AI generated summaries and answers, including CTV, streaming audio, social video... - AI-driven privacy breaches will lead to a 20% rise in class-action lawsuits. www.businesswire.com/news/home/20...

Apple could disables App Tracking Transparency (ATT) due to some conflicts (lawsuits etc...) www.macrumors.com/2025/10/23/a...

Clarification from Prebid about Transaction id (TID) : - Prebid.js v10.9 (Aug 2025) lets publishers choose between global or SSP-specific TIDs. - Future updates will offer more control, while earlier versions continue using global TIDs prebid.org/prebid-org-c...

Amazon launches AWS RTB Fabric to run Real-time bidding (RTB) with partners, reducing 80% of cloud networking cost and lowering latency for partners aws.amazon.com/rtb-fabric/

MRC (Media Rating Council) clarifies that Ad Verification vendors offering Property-Level services based on keywords and context can't position these services as "Brand Safety" unless they meet content-level standards for images, video, and audio mediaratingcouncil.org/sites/defaul...

While CHIPS and FedCM will keep running including Private State Tokens, a lot of Privacy Sandbox Technologies will be retired by Google privacysandbox.com/news/update-...

Built on top of OpenPath and OpenAds, PubDesk (a tool for publisher) is the new publisher-facing dashboard from The Trade Desk (TTD) to help publisher better align with buyer demand www.adexchanger.com/publishers/i...

Starting January 2027, California will become the first state to require browsers to provide users a simple, built-in way to block the sale or sharing of their personal data (e. g. GPC Global privacy control) cppa.ca.gov/announcement...

Microsoft has announced Amazon DSP as its preferred transition partner for Microsoft Invest customers, as part of its strategy to transition away from media buying through their DSP. The transition will begin immediately advertising.amazon.com/library/news...

Starting in Safari 26 on macOS 26, iOS 26, and iPadOS 26, Apple introduces Web Support for the Digital Credentials API. This means websites can now request mobile IDs from Apple Wallet and third party Wallets webkit.org/blog/17431/o...

Mozilla is bringing programmatic advertising to Firefox. Advertisers will get access to Mozilla’s Firefox New Tab audience, an inventory available exclusively through Private Marketplace (PMP) deals via Index Exchange www.adweek.com/media/mozill...

Microsoft is working on a free Xbox Cloud Gaming version with ads : - Two min preroll ads before a game is ready to stream - A time limit of 1 hour for sessions, and it only provides up to 5 hours for free per month www.tomshardware.com/video-games/...

EU is considering reforms to simplify cookie rules, allowing users to set preferences once (e.g. in browser settings) or removing consent for harmless cookies like basic stats. It would be a win for browsers, publishers, advertising and adtech www.politico.eu/article/euro...

Amazon will pay a $2.5 billion fine. When dark pattern tricks consumers into subscription and make cancellation intentionally difficult... Now US hits harder than EU? www.cnn.com/2025/09/25/t...

Google is rolling out Gemini in Chrome. AI (artificial intelligence) part of the browser to explain webpages or perform task like booking a haircut or groceries blog.google/products/chr...

The French government has published its proposed governance framework for AI (artificial intelligence), detailing the roles of national authorities in monitoring and enforcing AI regulation www.entreprises.gouv.fr/priorites-et...

Countries : Implementing regulations that require age verification for accessing sensitive content online Telecom companies : Offering built-in VPN services at no extra cost as part of mobile plans (e.g. Free Mobile in France) www.iliad.fr/media/CP_160...

EDPB guidelines on the interplay between the Digital Services Act (DSA) and GDPR out for public consultation until 31 October. They outline rules for lawful personal data use in content moderation, advertising, recommender systems & child protection www.edpb.europa.eu/news/news/20...

The CJEU ruling in the the EDPS vs SRB case : - Pseudonymized data is not always considered personal data - Personal opinions are linked to the individual and count as personal data - Recipients cant share pseudonymised data with parties able to reidentify curia.europa.eu/juris/docume...

In US, Google antitrust ruling: - They keep Chrome & Android - No exclusive deals for default search - Must share some search data with rivals - Can’t require preloading of its apps to access Play Store - Still allowed to pay Apple & others for placement www.cnbc.com/2025/09/02/g...

According to a publication, the EU is planning to make a deal with the U.S. on a Framework Agreement for the exchange of personal data (identity and fingerprints of the traveller), from EU to the US, in the context of border security and visa procedures eur-lex.europa.eu/legal-conten...

Microsoft to French Senate: - If US makes a "correct" requests, Microsoft must share EU data - EU clients may not be informed of the disclosure, data sharing => Any US company under Patriot Act and Cloud Act, must cooperate www.frandroid.com/culture-tech...

Germany court reopens Axel Springer vs. adblocker case. While publishers lose revenue, the case opens the debate : Is modifying web pages a copyright violation vs. user's right to choose extension (privacy protection, remove ads, reading experience...) www.extremetech.com/computing/ge...

Following Prebid's change to Transaction ID : - Disrupts deduplication & SPO, affecting DSP and publishers - Discrepancy with IAB Tech Lab OpenRTB - TID change could expose publisher relationships and user data, raising privacy concerns by linking bids ppc.land/iab-tech-lab...

Google using AI to identify user age and protect kids : - Useful for advertising - Find the balance between privacy and user data - If accurate, better than age check via login? blog.google/technology/s...