Press
AISUM's technology could help ad tech companies
Mar 27, 2025
The recent article from AdExchanger, published earlier today at 12:24 PM PDT on March 26, 2025, discusses the UK's Information Commissioner's Office (ICO) prioritizing ad tech in 2025, with key priorities including online tracking, children's privacy, and updating guidance on AI and automated decision-making. The ICO aims to ensure "meaningful choice" for users regarding personalized ads, driven by research showing users value personalized ads but want control and choice. The article also mentions the IAB Tech Lab's efforts in promoting privacy-enhancing technologies (PETs) to balance privacy and addressability.
What AISUM's Technology Offers
AISUM's AEDI technology uses Vision AI to echo the brand-matched content slots directly within article images, focusing on images understood as descriptions targeting based on image content rather than user data. This approach is detailed on their website, AISUM, which emphasizes creating new revenue streams for publishers and brands without mentioning personal data processing.
How It Relates to Regulations
Given the ICO's focus, AISUM's technology could help ad tech companies reduce reliance on personal data, aligning with CCPA's requirements for managing opt-out requests and GDPR's emphasis on data minimization. For ADMT regulations under CCPA, compliance needs may not be triggered if AISUM doesn't process personal data. Additionally, not collecting children's data for COPPA could simplify compliance, especially given the ICO's priority for children's privacy.
Comprehensive Analysis of Data Protection Regulations
The article from AdExchanger, published on March 26, 2025, at 12:24 PM PDT, highlights the UK's Information Commissioner's Office (ICO) setting its sights on ad tech for 2025, with key priorities including online tracking, children's privacy, and updating guidance on AI and automated decision-making. The ICO aims to ensure "meaningful choice" for users regarding personalized ads, driven by research showing users value personalized ads but want control and choice. The article also mentions the IAB Tech Lab's efforts, such as promoting privacy-enhancing technologies (PETs) through its PETs Working Group, including developments like seller-defined audiences and privacy sandbox assessments.
However, the article does not delve deeply into specific regulations like the California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR), or Automated Decision-Making Technology (ADMT) regulations, nor does it explore how specific technologies like AISUM's can address these regulatory challenges. This analysis aims to fill these gaps by examining AISUM's technology, as detailed on AISUM, and its relevance to these regulations, including the UK's ICO priorities and the IAB Tech Lab's PETs efforts.
Understanding AISUM's Technology
AISUM, as per its website, offers AEDI technology that embeds AI-driven, brand-matched products directly within article images, creating new revenue streams for publishers and brands. The technology matches content and products in real time, aligning with audience interests to boost engagement, and is described as leveraging advanced Vision AI for content placements. Notably, the provided information does not explicitly mention the use of user data, suggesting a focus on content targeting based on image content rather than personal data.
A review of available web information, including their history and company details, supports the assumption that AISUM's core function does not involve processing personal information for ad targeting. This is a critical distinction, positioning AISUM's technology as potentially outside the scope of regulations requiring personal data handling. Further details from web searches indicate AISUM's focus on AI-driven image matching for advertising, embedding ads within article images to generate revenue, with no direct mention of user data collection in the accessible content, suggesting their technology is more about content-based targeting, a departure from traditional ad tech reliant on user tracking.
Regulatory Landscape and Implications for Ad Tech
To understand how AISUM fits into this landscape, we first examine the key regulations:
CCPA: Enacted in 2018, the CCPA gives California residents rights over their data, including the right to know, opt out of data sales, and delete data. This means managing consent and handling opt-out requests for ad tech, as detailed in CCPA and Ad Tech: The Definitive Guide for 2023. The CCPA also includes proposed regulations on ADMT, defined as "any technology that processes personal information and uses computation to execute a decision, replace human decision-making, or substantially facilitate human decision-making," as noted in What is Automated Decisionmaking Technology (ADMT) Under CCPA Proposed Regulations?.
GDPR: Effective since 2018, the GDPR has been applied to any company processing EU residents' personal data, requiring a legal basis like consent and emphasizing transparency and data minimization. Its impact on ad tech is significant, as outlined in GDPR and Ad Tech: The Definitive Guide for 2023, with fines up to €20 million or 4% of global turnover for breaches.
ADMT Regulations: Under California's proposed rules, ADMT regulations require businesses to provide pre-use notices, opt-out mechanisms, and conduct risk assessments for technologies processing personal information, as discussed in The California Privacy Protection Agency Advances Regulations to….
COPPA: The Children's Online Privacy Protection Act regulates the collection of personal information from children under 13, affecting ad tech companies on child-directed sites, as detailed in How Publishers Can Become COPPA Compliant?. It requires parental consent and limits data collection, impacting traditional ad tech reliant on tracking.
Traditional ad tech faces challenges under these regulations due to its reliance on tracking individual users via cookies and identifiers, which can violate consent requirements and data minimization principles. For instance, the article notes issues like sites not offering opt-out options and difficulties withdrawing consent, which align with CCPA and GDPR concerns.
UK's ICO Priorities and Concerns
The ICO's 2025 priorities, as outlined in recent updates, include online tracking, children's privacy, and AI/automated decision-making, focusing on ensuring meaningful user control. From The UK’s Data Protection Authority Has Its Eye On Ad Tech This Year, the ICO is mainly concerned with deceptive practices like setting cookies without consent and alternative tracking methods like fingerprinting, as detailed in the ICO's 2025 priorities for the online advertising industry. The ICO's strategy, published on January 23, 2025, aims for a fair and transparent online world. It addresses areas where individuals lack sufficient control, such as deceptive choice and inadequate consent mechanisms, as noted in the UK ICO Publishes its 2025 Strategy for Online Tracking.
IAB Tech Lab's Efforts in Promoting Privacy-Enhancing Technologies (PETs)
As mentioned in the article, the IAB Tech Lab is working on PETs to balance privacy and addressability, including seller-defined audiences and privacy sandbox assessments. This aligns with their broader efforts to support compliant deployment of "consent or pay" models and encourage the adoption of more privacy-friendly online advertising models. What can the industry expect from the ICO in 2025? | IAB UK. These efforts aim to ensure meaningful user control and address tracking on apps and connected TVs, which complements AISUM's approach by promoting technologies that minimize personal data use.
AISUM as a Solution: Detailed Analysis
AISUM's technology, by focusing on content targeting, offers a potential solution to these challenges. Here's how it aligns with each regulation and the UK's ICO priorities:
Regulation/Priority | Key Requirements | How AISUM Helps |
CCPA | Right to know, opt-out, delete; ADMT notices and opt-outs | No personal data processing for targeting, reducing opt-out needs; likely not ADMT |
GDPR | Consent, transparency, data minimization | Minimal personal data use, simplifying consent management, and aligning with minimization |
ADMT (CCPA) | Pre-use notices, opt-outs for ADMT processing personal data | If not processing personal data, it may not trigger ADMT rules, easing compliance |
COPPA | Parental consent, limits on children's data collection | No personal data collection, avoiding COPPA compliance needs for targeting |
UK's ICO Priorities | Meaningful choice, control over tracking, children's privacy | Content targeting reduces tracking, enhances user control, and protects children |
CCPA Compliance: AISUM's technology, by not processing personal data for ad targeting, reduces the need to manage opt-out requests related to data sales or ADMT. This is supported by the understanding that ad placements are based on image content, as per AISUM, potentially avoiding extensive CCPA compliance measures like those required for behavioral targeting, as noted in CCPA and Ad Tech: The Definitive Guide for 2023. This is particularly relevant for ad tech companies facing scrutiny under CCPA, especially with the proposed ADMT regulations, which could impose additional compliance burdens.
GDPR Compliance: The GDPR's emphasis on consent and data minimization is addressed by AISUM's approach, which does not rely on personal data for targeting decisions. This aligns with the principle of data minimization, reducing the risk of non-compliance and potential fines, as highlighted in GDPR and Ad Tech: The Definitive Guide for 2023. Given the UK's focus on online tracking, as mentioned in the article, AISUM's technology could help UK-based ad tech companies align with UKGDPR and Data Protection Act 2018 requirements by minimizing data processing needs, addressing the ICO's concerns about deceptive practices and consent, as seen in UK ICO Publishes its 2025 Strategy for Online Tracking.
ADMT Regulations: Given the definition of ADMT requiring personal information processing, AISUM's technology, if indeed not processing such data, may fall outside these regulations. This is a significant advantage, as it avoids needing pre-use notices and opt-out mechanisms, as discussed in What is Automated Decisionmaking Technology (ADMT) Under CCPA Proposed Regulations?. This could be an unexpected benefit for ad tech companies, as it reduces the regulatory overhead associated with ADMT compliance, especially in light of the ICO's focus on AI and automated decision-making.
COPPA Compliance: Given the ICO's emphasis on children's privacy, AISUM's technology, by not relying on user data, could also help ad tech companies comply with COPPA by minimizing data collection, especially in contexts where children's content is involved, as detailed in How Publishers Can Become COPPA Compliant?. This is particularly relevant as traditional ad tech faces challenges with behavioral targeting on child-directed sites, and AISUM's approach could offer a compliant alternative.
Areas Not Covered by the Article
The article focuses on the ICO's priorities and industry responses like PETs but does not explore specific compliance strategies for CCPA, GDPR, or ADMT. It also lacks discussion on how technologies like AISUM's can provide privacy-friendly alternatives. This analysis addresses these gaps by detailing how AISUM's Content targeting can reduce reliance on user tracking, aligning with the article's mention of "meaningful choice" and the need for compliance, especially in light of the UK's focus on online monitoring.
Alignment with IAB Tech Lab's PETs Efforts
The IAB Tech Lab's promotion of PETs, such as privacy sandbox assessments, aligns with AISUM's technology by encouraging privacy-friendly models that maintain addressability without extensive personal data use. This is evident in their focus on supporting compliant "consent or pay" models and addressing tracking on apps and connected TVs, as seen in What can the industry expect from the ICO in 2025? | IAB UK, which complements AISUM's approach by reducing the need for user data in advertising.
Key Citations
The UK’s Data Protection Authority Has Its Eye On Ad Tech This Year
What is Automated Decisionmaking Technology (ADMT) Under CCPA Proposed Regulations?
The California Privacy Protection Agency Advances Regulations to…
What can the industry expect from the ICO in 2025? | IAB UK
