Google will argue that while this data is intimate (religion, age, personal preferences), it is not personally identifiable.
I have access to one of these data feeds of bid requests, and for the most part, they're right. Pick a random entry and even after hours of searching and correlating with the other data we have on file, it's unlikely I'd be able to identify exactly who it was (ie. Their name and address) on that website.
Some requests totally are identify-able though, for example if the user goes on to click one of our ads, buy something, and give us their postal address. In the eyes of the law, we have broken the rules there by re-identifying previously anonymous data.
While I think Google is technically in the right here, they're gonna loose big time because they're a foreign company and don't have much love with the public.
I have access to one of these data feeds of bid requests, and for the most part, they're right. Pick a random entry and even after hours of searching and correlating with the other data we have on file, it's unlikely I'd be able to identify exactly who it was (ie. Their name and address) on that website.
Some requests totally are identify-able though, for example if the user goes on to click one of our ads, buy something, and give us their postal address. In the eyes of the law, we have broken the rules there by re-identifying previously anonymous data.
While I think Google is technically in the right here, they're gonna loose big time because they're a foreign company and don't have much love with the public.