https://www.eff.org/deeplinks/2025/01/online-behavioral-ads-fuel-surveillance-industry-heres-how Skip to main content * About + Contact + Press + People + Opportunities * Issues + Free Speech + Privacy + Creativity and Innovation + Transparency + International + Security * Our Work + Deeplinks Blog + Press Releases + Events + Legal Cases + Whitepapers + Podcast + Annual Reports * Take Action + Action Center + Electronic Frontier Alliance + Volunteer * Tools + Privacy Badger + Surveillance Self-Defense + Certbot + Atlas of Surveillance + Cover Your Tracks + Street Level Surveillance + apkeep * Donate + Donate to EFF + Giving Societies + Shop + Org. Membership + Other Ways to Give + Membership FAQ * Donate + Donate to EFF + Shop + Other Ways to Give * Search form Search [ ] --------------------------------------------------------------------- Email updates on news, actions, and events in your area. Join EFF Lists * Copyright (CC BY) * Trademark * Privacy Policy * Thanks Electronic Frontier Foundation Donate Electronic Frontier Foundation * About + Contact + Press + People + Opportunities * Issues + Free Speech + Privacy + Creativity and Innovation + Transparency + International + Security * Our Work + Deeplinks Blog + Press Releases + Events + Legal Cases + Whitepapers + Podcast + Annual Reports * Take Action + Action Center + Electronic Frontier Alliance + Volunteer * Tools + Privacy Badger + Surveillance Self-Defense + Certbot + Atlas of Surveillance + Cover Your Tracks + Street Level Surveillance + apkeep * Donate + Donate to EFF + Giving Societies + Shop + Org. Membership + Other Ways to Give + Membership FAQ * Donate + Donate to EFF + Shop + Other Ways to Give * Search form Search [ ] Online Behavioral Ads Fuel the Surveillance Industry--Here's How DEEPLINKS BLOG By Lena Cohen January 6, 2025 An animated image showing location pins dropping onto a street map from above, tracing several paths Online Behavioral Ads Fuel the Surveillance Industry--Here's How Share It Share on Twitter Share on Facebook Copy link An animated image showing location pins dropping onto a street map from above, tracing several paths A global spy tool exposed the locations of billions of people to anyone willing to pay. A Catholic group bought location data about gay dating app users in an effort to out gay priests. A location data broker sold lists of people who attended political protests. What do these privacy violations have in common? They share a source of data that's shockingly pervasive and unregulated: the technology powering nearly every ad you see online. Each time you see a targeted ad, your personal information is exposed to thousands of advertisers and data brokers through a process called "real-time bidding" (RTB). This process does more than deliver ads--it fuels government surveillance, poses national security risks, and gives data brokers easy access to your online activity. RTB might be the most privacy-invasive surveillance system that you've never heard of. What is Real-Time Bidding? RTB is the process used to select the targeted ads shown to you on nearly every website and app you visit. The ads you see are the winners of milliseconds-long auctions that expose your personal information to thousands of companies a day. Here's how it works: 1. The moment you visit a website or app with ad space, it asks a company that runs ad auctions to determine which ads it will display for you. This involves sending information about you and the content you're viewing to the ad auction company. 2. The ad auction company packages all the information they can gather about you into a "bid request" and broadcasts it to thousands of potential advertisers. 3. The bid request may contain personal information like your unique advertising ID, location, IP address, device details, interests, and demographic information. The information in bid requests is called "bidstream data" and can easily be linked to real people. 4. Advertisers use the personal information in each bid request, along with data profiles they've built about you over time, to decide whether to bid on ad space. 5. Advertisers, and their ad buying platforms, can store the personal data in the bid request regardless of whether or not they bid on ad space. A key vulnerability of real-time bidding is that while only one advertiser wins the auction, all participants receive the data. Indeed, anyone posing as an ad buyer can access a stream of sensitive data about the billions of individuals using websites or apps with targeted ads. That's a big way that RTB puts personal data into the hands of data brokers, who sell it to basically anyone willing to pay. Although some ad auction companies have policies against selling bidstream data, the practice remains widespread. RTB doesn't just allow companies to harvest your data--it also incentivizes it. Bid requests containing more personal data attract higher bids, so websites and apps are financially motivated to harvest as much of your data as possible. RTB further incentivizes data brokers to track your online activity because advertisers purchase data from data brokers to inform their bidding decisions. Data brokers don't need any direct relationship with the apps and websites they're collecting bidstream data from. While some data collection methods require web or app developers to install code from a data broker, RTB is facilitated by ad companies that are already plugged into most websites and apps. This allows data brokers to collect data at a staggering scale. Hundreds of billions of RTB bid requests are broadcast every day. For each of those bids, thousands of real or fake ad buying platforms may receive data. As a result, entire businesses have emerged to harvest and sell data from online advertising auctions. First FTC Action Against Abuse of Real-Time Bidding Data A recent enforcement action by the Federal Trade Commission (FTC) shows that the dangers of RTB are not hypothetical--data brokers actively rely on RTB to collect and sell sensitive information. The FTC found that data broker Mobilewalla was collecting personal data--including precise location information--from RTB auctions without placing ads. Mobilewalla collected data on over a billion people, with an estimated 60% sourced directly from RTB auctions. The company then sold this data for a range of invasive purposes, including tracking union organizers, tracking people at Black Lives Matter protests, and compiling home addresses of healthcare employees for recruitment by competing employers. It also categorized people into custom groups for advertisers, such as "pregnant women," "Hispanic churchgoers," and "members of the LGBTQ+ community." The FTC concluded that Mobilewalla's practice of collecting personal data from RTB auctions where they didn't place ads violated the FTC Act's prohibition of unfair conduct. The FTC's proposed settlement order bans Mobilewalla from collecting consumer data from RTB auctions for any purposes other than participating in those auctions. This action marks the first time the FTC has targeted the abuse of bidstream data. While we celebrate this significant milestone, the dangers of RTB go far beyond one data broker. Real-Time Bidding Enables Mass Surveillance RTB is regularly exploited for government surveillance. As early as 2017, researchers demonstrated that $1,000 worth of ad targeting data could be used to track an individuals' locations and glean sensitive information like their religion and sexual orientation. Since then, data brokers have been caught selling bidstream data to government intelligence agencies. For example, the data broker Near Intelligence collected data about more than a billion devices from RTB auctions and sold it to the U.S. Defense Department. Mobilewalla sold bidstream data to another data broker, Gravy Analytics, whose subsidiary, Venntell, likewise has sold location data to the FBI, ICE, CBP, and other government agencies. In addition to buying raw bidstream data, governments buy surveillance tools that rely on the same advertising auctions. The surveillance company Rayzone posed as an advertiser to acquire bidstream data, which it repurposed into tracking tools sold to governments around the world. Rayzone's tools could identify phones that had been in specific locations and link them to people's names, addresses, and browsing histories. Patternz, another surveillance tool built on bidstream data, was advertised to security agencies worldwide as a way to track people's locations. The CEO of Patternz highlighted the connection between surveillance and advertising technology when he suggested his company could track people through " virtually any app that has ads." Beyond the privacy harms from RTB-fueled government surveillance, RTB also creates national security risks. Researchers have warned that RTB could allow foreign states and non-state actors to obtain compromising personal data about American defense personnel and political leaders. In fact, Google's ad auctions sent sensitive data to a Russian ad company for months after it was sanctioned by the U.S. Treasury. The privacy and security dangers of RTB are inherent to its design, and not just a matter of misuse by individual data brokers. The process broadcasts torrents of our personal data to thousands of companies, hundreds of times per day, with no oversight of how this information is ultimately used. This indiscriminate sharing of location data and other personal information is dangerous, regardless of whether the recipients are advertisers or surveillance companies in disguise. Sharing sensitive data with advertisers enables exploitative advertising, such as predatory loan companies targeting people in financial distress. RTB is a surveillance system at its core, presenting corporations and governments with limitless opportunities to use our data against us. How You Can Protect Yourself Privacy-invasive ad auctions occur on nearly every website and app, but there are steps you can take to protect yourself: * For apps: Follow EFF's instructions to disable your mobile advertising ID and audit app permissions. These steps will reduce the personal data available to the RTB process and make it harder for data brokers to create detailed profiles about you. * For websites: Install Privacy Badger, a free browser extension built by EFF to block online trackers. Privacy Badger automatically blocks tracking-enabled advertisements, preventing the RTB process from beginning. These measures will help protect your privacy, but advertisers are constantly finding new ways to collect and exploit your data. This is just one more reason why individuals shouldn't bear the sole responsibility of defending their data every time they use the internet. The Real Solution: Ban Online Behavioral Advertising The best way to prevent online ads from fueling surveillance is to ban online behavioral advertising. This would end the practice of targeting ads based on your online activity, removing the primary incentive for companies to track and share your personal data. It would also prevent your personal data from being broadcast to data brokers through RTB auctions. Ads could still be targeted contextually--based on the content of the page you're currently viewing--without collecting or exposing sensitive information about you. This shift would not only protect individual privacy but also reduce the power of the surveillance industry. Seeing an ad shouldn't mean surrendering your data to thousands of companies you've never heard of. It's time to end online behavioral advertising and the mass surveillance it enables. Related Issues Online Behavioral Tracking Privacy Share It Share on Twitter Share on Facebook Copy link Join EFF Lists Discover more. Email updates on news, actions, events in your area, and more. Email Address [ ] Postal Code (optional) [ ] Anti-spam question: Enter the three-letter abbreviation for Electronic Frontier Foundation: [ ] Don't fill out this field (required) [ ] [Submit] Thanks, you're awesome! Please check your email for a confirmation link. Oops something is broken right now, please try again later. Related Updates Tik Tok phone icon turned into circe-slash icon Deeplinks Blog by David Greene | December 18, 2024 EFF Statement on U.S. Supreme Court's Decision to Consider TikTok Ban The TikTok ban itself and the DC Circuit's approval of it should be of great concern even to those who find TikTok undesirable or scary. Shutting down communications platforms or forcing their reorganization based on concerns of foreign propaganda and anti-national manipulation is an eminently anti-democratic tactic, one that the... Phone with ears extending out of the sides of the device and the text "Is My Phone Listening to Me?" Deeplinks Blog by Christian Romero | October 31, 2024 "Is My Phone Listening To Me?" Whether you're just starting to question some of the effects of technology in your life or you're the designated tech wizard of your family looking for resources to share, Digital Rights Bytes is here to help answer some common questions that may be bugging you about the devices you use. [mobile-privacy] Deeplinks Blog by Guest Author, Erica Portnoy | October 1, 2024 How to Stop Advertisers From Tracking Your Teen Across the Internet When children turn 13, they age out of the data protections provided by the Children's Online Privacy Protection Act (COPPA). Then, they become targets for data collection from data brokers that collect their information from social media apps, shopping history, location tracking services, and more. A woman being watched behind a one-way mirror Deeplinks Blog by Lena Cohen | September 26, 2024 FTC Report Confirms: Commercial Surveillance is Out of Control A new Federal Trade Commission (FTC) report confirms what EFF has been warning about for years: tech giants are widely harvesting and sharing your personal information to fuel their online behavioral advertising businesses. Google Spying Deeplinks Blog by Lena Cohen | August 2, 2024 Google Breaks Promise to Block Third-Party Cookies Last week, Google backtracked on its long-standing promise to block third-party cookies in Chrome. This is bad for your privacy and good for Google's business. Third-party cookies are a pervasive tracking technology that allow companies to snoop on your online activity for surveillance and ad-targeting purposes. The consumer... Google Spying Deeplinks Blog by Lena Cohen | July 22, 2024 Why Privacy Badger Opts You Out of Google's "Privacy Sandbox" The latest update of Privacy Badger opts users out of ad tracking through Google's "Privacy Sandbox." Despite being billed as a privacy feature, Privacy Sandbox protects Google's bottom line at the expense of your privacy. Privacy Sandbox might be less invasive than third-party cookies, but that doesn't mean it's good... Congress + Action Whitepaper Privacy First: A Better Way to Address Online Harms State, federal, and international regulators are increasingly concerned about the harms they believe the internet and new technology are causing. The list is long, implicating child safety, journalism, access to healthcare data, digital justice, competition, artificial intelligence, and government surveillance, just to name a few. The stories behind them are... Google Spying Deeplinks Blog by Thorin Klosowski | September 28, 2023 How To Turn Off Google's "Privacy Sandbox" Ad Tracking--and Why You Should Google has rolled out "Privacy Sandbox," a Chrome feature first announced back in 2019 that, among other things, exchanges third-party cookies--the most common form of tracking technology--for what the company is now calling "Topics." Topics is a response to pushback against Google's proposed Federated Learning of Cohorts... A large robot hand steals a tool from an alarmed person Deeplinks Blog by Cory Doctorow | May 9, 2023 As Platforms Decay, Let's Put Users First The net's long decline into "five giant websites, each filled with screenshots of the other four" isn't a mystery. Nor was it by any means a forgone conclusion. Instead, we got here through a series of conscious actions by big businesses and lawmakers that put antitrust law into a... fingers prepared to flick a small person with a megaphone off the screen Deeplinks Blog by Adam Schwartz, David Greene | March 16, 2023 Government Hasn't Justified a TikTok Ban Freedom of speech and association include the right to choose one's communication technologies. Politicians shouldn't be able to tell you what to say, where to say it, or who to say it to.So we are troubled by growing demands in the United States for restrictions on TikTok, a technology that... Discover more. Email updates on news, actions, events in your area, and more. Email Address [ ] Postal Code (optional) [ ] Anti-spam question: Enter the three-letter abbreviation for Electronic Frontier Foundation: [ ] Don't fill out this field (required) [ ] [Submit] Thanks, you're awesome! Please check your email for a confirmation link. Oops something is broken right now, please try again later. Share It Share on Twitter Share on Facebook Copy link Related Issues Online Behavioral Tracking Privacy Back to top EFF Home Follow EFF: * x * facebook * instagram * youtube * flicker * linkedin * mastodon * tiktok * threads Check out our 4-star rating on Charity Navigator. Contact * General * Legal * Security * Membership * Press About * Calendar * Volunteer * Victories * History * Internships * Jobs * Staff * Diversity & Inclusion Issues * Free Speech * Privacy * Creativity & Innovation * Transparency * International * Security Updates * Blog * Press Releases * Events * Legal Cases * Whitepapers * EFFector Newsletter Press * Press Contact Donate * Join or Renew Membership Online * One-Time Donation Online * Giving Societies * Shop * Other Ways to Give * Copyright (CC BY) * Trademark * Privacy Policy * Thanks JavaScript license information *