{"id":312,"date":"2015-03-05T08:24:57","date_gmt":"2015-03-05T08:24:57","guid":{"rendered":"http:\/\/okodigital.wpengine.com\/?p=312"},"modified":"2015-03-05T08:24:57","modified_gmt":"2015-03-05T08:24:57","slug":"what-does-adsense-consider-pii-anyway","status":"publish","type":"post","link":"https:\/\/cool.co\/supply-side-platform-home\/what-does-adsense-consider-pii-anyway\/","title":{"rendered":"What does AdSense consider PII anyway?"},"content":{"rendered":"

Google\u2019s Publisher Policy Team, based out of Mountainview, have been busy emailing out their sincerest apologies to publishers to recently received erroneous communications about breaches to the AdSense PII policy. \u00a0 Whilst the original emails were sent in error, they’ve been an eye opener to many publishers who were not previously aware of the policies around PII.<\/p>\n

What happened?<\/h2>\n

A large number of publishers received an email saying that a policy issue relating to PII had now been resolved despite never having received notification or an issue (and it not appearing in their AdSense dashboards). Realising their error, the Google Publisher Policy Team sent out an email apologising for the wrongly sent emails. \u00a0Crucially though this was sent to large numbers of publishers who didn’t receive the original erroneous email. \u00a0 Despite all the confusion this is an issue that publishers should be aware of.<\/p>\n

PII \u2013 Personally Identifiable Information<\/h2>\n

Google\u2019s AdSense Programme policies page<\/a>\u00a0defines personally identifiable information as information that \u201cGoogle could use or recognise as personally-identifiable information\u201d or \u201cpermanently identifies a particular device\u201d.\u00a0 That can mean anything from names to email addresses, phone numbers or the serial numbers of a mobile device.<\/p>\n

You shall not pass!<\/h2>\n

When it comes to passing information to AdSense, DFP or AdX there are limited ways that this can be done.\u00a0 The most common is through the URL that is requesting the ad impression.\u00a0\u00a0 If you put PII into URLs this isn\u2019t a good thing for a number of reasons that go way beyond Ad Serving.\u00a0 It will though pass that PII into the ad system.<\/p>\n

Other ways this can happen would usually be more deliberate such as using custom targeting criteria in DFP to pass the values.<\/p>\n

Why is this an issue?<\/h2>\n

Google loves to build up information on its users, but it does so within the bounds of its privacy policy. Information passed into the ad system through the means described above would become available to advertisers and those operating on the buy-side of the ad system.\u00a0 Once in the wild it would not be protected by the privacy policies in place at Google.<\/p>\n

False positives and confusion<\/h2>\n

The recent erroneous warning will not help with a topic that already causes confusion.\u00a0 If a warning appears in your dashboard or you receive a policy warning about PII this should not be ignored as it is considered a serious issue by Google.<\/p>\n

Publishers who have genuine warnings around this issue are often surprised and confused at how they might be passing personally identifiable information.\u00a0 Below are some ways we have seen publishers get caught out with this issue.<\/p>\n