Helping Google Marketing Platform users comply with US state privacy laws

Google has a long history of taking a user-first approach in everything we do. As a part of our commitment to users, we never sell personal information. We give users transparency and control over their ad experiences via My Ad Centre, My Account and several other features to help you manage your account. Per our Personalised advertising policy, we never use sensitive information like health, race, religion or sexual orientation to personalise ads. We also invest in initiatives such as the Coalition for Better Ads, the Google News Initiative and ads.txt to support a healthy and sustainable ads ecosystem.

Google welcomes privacy laws that protect consumers. In May 2018, we launched several updates to help advertisers and publishers comply with the General Data Protection Regulation (GDPR) in the EEA and the UK.

In 2019, we began offering restricted data processing to help advertisers, publishers and partners manage their compliance with the California Consumer Privacy Act (CCPA). Starting in January 2023, we’re expanding the operation of restricted data processing to help customers and partners manage their compliance with the new U.S. state privacy laws.

US state privacy laws and the Google Marketing Platform

References to Search Ads 360 include both the old and new versions of the product.

Effective 1 January 2020, Display & Video 360, Campaign Manager 360 and Search Ads 360 will offer restricted data processing to customers. Display & Video 360, Campaign Manager 360 and Search Ads 360 will continue to work as they do today. As a reminder, each customer is responsible for using Display & Video 360, Campaign Manager 360 and Search Ads 360 in compliance with US state privacy laws and other applicable laws. Please note the following:

• Restricted data processing does not extend to the sending or disclosure of data to third parties from products in the Google Marketing Platform (GMP). You must ensure that you’ve taken any measures with respect to such third parties as required to meet your restricted data processing compliance needs.

• If you share data from one Google product to another Google product, data, once shared, will be subject to the terms of the product that receives the data.

• Certain types of campaigns are not compatible with restricted data processing, such as TrueView, bumper or other ads on YouTube and Google video partners; Gmail; and outcome-based buying campaigns.

• Restricted data processing does not apply to data shared with other products that do not support restricted data processing. This includes, but is not limited to, when audience list data is shared from Display & Video 360 with Google Ads, when YouTube conversion tracking is enabled for Floodlight, and similar functionality.  

• Please review your existing settings in Display & Video 360, Campaign Manager 360 and Search Ads 360 to ensure that you're using these products in compliance with US state privacy laws and other applicable laws.

Note: Google also offers data deletion and retention controls. Subject to the terms of our U.S. State Privacy Laws Addenda, our data deletion and retention commitments apply when we act as your service provider with respect to data processed while restricted data processing is enabled, on a backwards-looking basis. Learn more about data deletion and retention controls

The Global Privacy Platform and Display & Video 360

Developed by the IAB’s Tech Lab, the Global Privacy Platform (GPP) is a standardised framework for storing and passing user privacy consent preferences.Display & Video 360 will support the GPP for publishers that want to use it for US-based inventory. This applies for the following: 

• US state strings
• Restricted data processing parameters
• Kids parameters

Display & Video 360 will not support the GPP for the following:

• US-wide strings
• TCF strings for the European Economic Area (EEA)