Privacy finding
Signs on the site that rules on advertising and on selling or sharing data concern it
Privacy Info Severity: Info
Part of the audit Which regulations apply. Finding id: privacy.regulationSignals.
What it costs you
Advertising services store and read identifiers, which is what the consent and opt-out rules are about. If nobody knows a service is there, nobody has checked what those rules ask.
What to do
Confirm with whoever handles privacy for the site that each advertising service is known, wanted and covered by the consent setup and the policy.
What it checks
- Advertising technology in use
- Signs of selling or sharing data
How to fix it
Confirm each advertising service
- List the advertising hosts this rule reports and who asked for each.
- Remove the ones nobody needs.
- For the rest, check with your privacy adviser which duties follow in the regions your visitors come from.
How to check: Run this rule again after the next crawl.
A real case
California's Attorney General found that Sephora ignored opt-out requests sent with the Global Privacy Control browser signal and did not tell customers that the trackers on its site amounted to selling their data. Sephora paid 1.2 million dollars in penalties under the 2022 settlement.