The platform has built-in settings for the three privacy regimes most ad businesses deal with: GDPR (EU), COPPA (children in the US) and CCPA (California).
What is built in
- Privacy settings for GDPR, COPPA and CCPA across the platform.
- The Publisher Ad Server has its own GDPR, COPPA and CCPA controls per zone.
- Supply-chain transparency through ads.txt and sellers.json.
Consent plugins
If you need consent collection or signals, plugins add it:
- Consent Manager: GDPR-ready consent (TCF 2.2) on publisher sites.
- Google Consent Mode v2: consent signals Google needs for EU traffic (included, no extra cost).
- Cookiebot and OneTrust: consent from those providers, wired into targeting.
Data processing
AdTech Europe publishes a Data Processing Agreement and a sub-processor list. As an operator, you remain responsible for your own lawful basis and consent duties towards your users.
This article is general information, not legal advice.
More on Technology and the Data Processing Agreement. Related: How is personal data processed? DPA, sub-processors and transfers and Security and data protection.