RE: Industry News15 Jan 2019 11:12
at last some posters are now accepting that GDPR does affect rthm and the industry.
It's gone from GDPR doesn't affect them TO it doesn't affect them much as most of their business is in US to it does affect them..
I suppose the 20-F I posted, convinced them... ;-)
After all why would a company spend time and money on being GDPR complaint on something they believe doesn't affect them??
I don't think anybody knows for sure how much GDPR has affected a company.
The points are:
Ad tech companies follow the industry's IAB GDPR framework guidelines. IT IS THAT framework which is questioned by the some authorities.
If the IAB framework needs to change then rthm WILL have to change their system to continue to comply.
2) If PII is being strictly defined to include IP addresses then this will affect targeting and the way the model works.
20-F filing by RTHM... CNIL questioning the IAB framework came later..
- Page 13:
"In particular, Europe’s new General Data Protection Regulation (“GDPR”) (which came into force in May 2018) extends the jurisdictional scope of European data protection law. As a result, RhythmOne IS subject to the GDPR when it provides its targeting services in Europe. The GDPR imposes stricter data protection requirements that may necessitate changes to RhythmOne’s services and business practices. Potential penalties for non-compliance with the GDPR include administrative fines of up to 4% of annual worldwide turnover. Complying with any new regulatory requirements HAS resulted in increased costs and could force RhythmOne to incur further substantial costs or require RhythmOne to change its business practices in a manner that could reduce its revenue or compromise its ability to effectively pursue its growth strategy."
"Evolving definitions of personal data within the EU, the United States and elsewhere, especially relating to the classification of IP addresses, machine or device identifiers, geo-location data and other such information, may cause RhythmOne to change RhythmOne’s business practices, diminish the quality of RhythmOne’s data and the value of RhythmOne’s solution, and hamper RhythmOne’s ability to expand its offerings into the EU or other jurisdictions outside of the United States. RhythmOne’s failure to comply with evolving interpretations of applicable laws and regulations, or to adequately protect personal data, could result in enforcement action against RhythmOne or reputational harm, which could have a material adverse impact on RhythmOne’s business, financial condition and results of operations."
https://www.sec.gov/Archives/edgar/data/1713721/000143774918014094/rhyth20180713_20f.htm