First Party and Third Party Requirements – Websites

FIRST PARTY REQUIREMENTS
(For websites such as publishers, retailers, and brands)

Notice (Disclosure on website in privacy policy or similar location)

• Describes IBA activity occurring on the website,
• Links to an Opt-Out Mechanism, and
• States adherence to the DAAC Principles.

Enhanced Notice (Clear, meaningful, and prominent real-time notice of collection or use of data for IBA purposes)

• Is displayed ‘Above the Fold’ or otherwise in a conspicuous manner,
• Links directly to a disclosure that describes IBA activity,
• Links to an Opt-Out Mechanism or lists all Third Parties conducting IBA activity,
• States adherence to the DAAC Principles, and
• Appears on all pages where data is collected or used for IBA.

Opt-Out Mechanism (To exercise choice with respect to the collection and use of data for IBA purposes)

• Easy-to-use Opt-Out Mechanism provided for all Third Parties conducting IBA activity on the website.

THIRD PARTY REQUIREMENTS
(For ad tech companies such as ad networks and data brokers)

Notice (Disclosure on website in privacy policy or similar location)

• Describes IBA data collection and use practices,
• Links to an Opt-Out Mechanism, and
• States adherence to the DAAC Principles.

Enhanced Notice (Real-time notice of collection or use)

• A Third Party is responsible for providing Enhanced Notice when collecting or using data for IBA purposes on a First Party website. It is usually provided through “In-Ad Notice” – notice in or around an advertisement, typically using the AdChoices Icon and Text, that directs users to the Third Party’s disclosure of its IBA practices, and an Opt-Out Mechanism (see Third Party Requirements – Notice, above).
• Where Third Parties are collecting data for IBA purposes on a First Party website, Enhanced Notice is typically provided by the First Party (see First Party Requirements – Enhanced Notice, above). However, Third Parties should collaborate with First Parties to ensure the requirements are met.

Opt-Out Mechanism (To exercise choice with respect to the collection and use of data for
IBA purposes)

• Provides an easy-to-use Opt-Out Mechanism.