Data, Privacy , Policies on Social Media Flashcards

1
Q

What is “Data-Based Advertising?”

A
  • Uses data to optimize its audience and creative messaging.
  • Shows ads to people on websites, regardless of the context of the website.
  • The alternate is the outmoded “Contextual Advertising,” which was placing your ad on websites whose audiences will likely be interested in your ad.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Contextual Advertising?

A

Advertisers placing content on websites that is topically related to their ad. This is the model of advertising in magazines and it was the model used in the early days of the internet, before Data-Based Advertising.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Advantages of Data-Based Advertising (3)

A
  1. more likely to interest people
  2. can target by demographics, location, interest, or previous behavior.
  3. 500% more effective than advertising without data!*

*“Data-Driven Advertising in Europe: Latest Research,” GfK Global, 2017

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a CMS?

A

A Content Management System.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a Content Management System?

A

A CMS is what is used by a publisher uses to:


  1. store, create, and manage content on their website. (Ie:Wordpress, Droomla, Drupal).
  2. CMS store and utilize user data to bring the right content to each user. 

  3. Also, Space is left there for ads
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How do Ads get on the website?

A

An Ad Server puts ads on the website.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How does the website/ad server get information about a person viewing the site?

A

When their browser requests a website from the publisher, SOME DATA ABOUT THE PERSON IS SENT TO THE PUBLISHER
That information is used to give them the relevant service/webpage
That information is also given to the Ad Server to show the person a relevant ad

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is included in Web Server Logs? (7)

A
  1. The user’s I.P. address
  2. The unique identifier (string of characters)
  3. Username (if applicable to access the website)
  4. Date and timestamp
  5. Data requested
  6. HTTP status code (200 success) (404 error)
  7. Size of the content file the person received
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is a cookie?

A

A website-specific code that is stored in a person’s browser to ease navigation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Cookies have limitations (3):

A
  1. Don’t work across browsers and devices.
  2. Can be blocked or erased from browsers
  3. Don’t work on mobile apps. (!!)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is a U.I.D.?

A

A user-ID created on websites where people have to login.

It is a unique number that is assigned to someone’s account that can be associated with all their logged-in behavior.

All activity, regardless of browser or device can be collected by a UID.

interests, behavior, and demographics can be stored.

Don’t store personally identifiable data, because the original item gets stored as hash data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is hash data?

A

Original data gets transformed by an algorithm and it takes another algorithm to translate it. That way no personally identifiable data is stored with a UID.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How many types of Data Ownership are there?

A

Three!

First Party Data
Second Party Data
Third Party Data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is First Party Data?

A

First Party Data is the data a company receives directly from the person they are interacting with.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is Second Party Data?

A

Second Party Data is the same as First Party Data but it passed along to a second party, often a trusted partner of the First Party, often a beneficial exchange.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Third Party Data?

A

Third Party Data (“third party cookies”) is data tracked about a person across sites. The data will often be aggregated across sites to generate profiles to describe the person’s interests and behaviors online.

This data is often packaged and sold by these third parties to advertisers who use it to supplement their own First Party Data or create profiles they can use to customize their advertising.

ie: using browser cookies.
Caveat: Since people don’t explicitly give permission to collect and store this data, third party data tracking often raises privacy concerns. As a result several browsers block third party data collection.

17
Q

What are the THREE different levels of privacy control?

A
1. LAWS: 
Government regulations (GDPR, CCPA, COPPA)
  1. Industry self-regulation
    (two largest: The Digital Advertising Alliance, The European Interactive Digital Advertising Alliance)
  2. Company Data Policies
    Most large online platforms have a public data policy that explains what data they receive, what they use it for, and how people can control what they share.
18
Q

What are the 3 government privacy control laws?

A
  1. GDPR
  2. CCPA
  3. COPPA
19
Q

What is GDPR? (+2)

A

General Data Protection Regulation: It’s a law that protects data and online privacy in the European Union. Very detailed and complex, but basically has requirements in two buckets:

  1. EU Citizen Data Rights
  2. Data protection obligations for companies who collect the data.
20
Q

GDPR rights for people (4):

A
  1. Right to access (the data)
  2. Right to correct it
  3. Right to erase it.
  4. Right to data portability (right to get a file of their information and pass it on to another company).
  5. Additional data protections (companies must protect the data they receive, must tell people within 72 hours if their data was leaked, certain data categories are prohibited from collection, ex: ethnicity or sexual orientation) AND BEFORE COMPANIES CAN RECEIVE DATA THEY MUST ASK FOR CONSENT
21
Q

Who manages and develops GDPR?

A

The European Union.

22
Q

Who must comply with GDPR?

A

Anyone who works with the personal data of people in the EU.

23
Q

How is GDPR enforced? (2)

A
  1. Supervisory authority in each EU country

2. Fines of up to 4% of annual revenue

24
Q

What does the CCPA stand for?

A

The California Consumer Privacy Act

25
Q

What is the CCPA law about?

A

The CCPA is a law to enhance privacy rights and consumer protection for residents of California.

The strictest of any consumer privacy laws in the U.S.

26
Q

What are the five disinct rights the CCPA gives to consumers?

A
  1. the right to know what information is collected about them
  2. the right to know whether that data is sold and to whom and the right to opt out of that sale
  3. the right to access the personal data that was collected about them
  4. the right to require a business to delete that information
  5. the right to not be discriminated against for exercising these rights
27
Q

Who manages and oversees the CCPA?

A

The California Attorney General’s Office

28
Q

Who must comply with the CCPA?

A

Any business that collects and controls the personal information of a California resident.

29
Q

How is the CCPA enforced?

A
  1. California Attorney General and California residents can enact lawsuits.
  2. Fines: Up to $7500 for intentional violations and $2500 for unintentional violations.
30
Q

What does COPPA stand for?

A

The Children’s Online Privacy Protection Act

31
Q

What does COPPA do?

A

Protects and limits collection of personal data for users under the age of 13.

32
Q

Key requirements of COPPA (3):

A
  1. Notice and parental consent before data collection for under 13.
  2. Companies must have a “clear and comprehensive” data collection policy.
  3. Must keep data secure and confidential
33
Q

Who manages COPPA?

A

the U.S. Federal Trade Commission (FTC)

34
Q

Who must comply with COPPA?

A

All companies who interact with or collect data of US children under 13.

35
Q

How is it enforced? (2)

A
  1. FTC relies on user complaints

2. Fines up to $40K per violation

36
Q

Who are the main industry self-regulating bodies? (2)

A
  1. Digital Advertising Alliance (DAA)

2. European Interactive Digital Advertising Alliance (EDAA)

37
Q

Background on the DAA

A

Digital Advertising Alliance

  • an alliance of different advertising bodies that came together to establish and enforce responsible privacy practices in digital advertising
  • established the “Your Ad Choices” program: encourages advertisers to show people the data that led them to see a particular ad. (icon will show you why a certain ad was shown to you, gives you info about how your data was used)
38
Q

Background on the EDAA

A

European Interactive Digital Advertising Alliance

  • developed by leading European bodies
  • goal was to introduce Europe-wide standards to enhance transparency and user control over data for interest-based advertising.
  • educates consumers about how their data is being used.
  • provides consumers with tools to control their data usage (one of these tools is the AdChoices icon created by the DAA)