An update on our Privacy Sandbox commitments

For further background on this topic, please see our blog from June.

Since we announced our Privacy Sandbox commitments earlier this year, we have continued to work with the UK’s Competition and Markets Authority (CMA) to address feedback that was raised as part of its public consultation process. We have also continued to update and seek feedback from the market and the UK Information Commissioner's Office (ICO) on our proposals.

We are determined to ensure that the Privacy Sandbox is developed in a way that works for the entire ecosystem and, as part of this process, we have now offered revised commitments, which can be found in full on the CMA’s website.

These revisions underline our commitment to ensuring that the changes we make in Chrome will apply in the same way to Google’s ad tech products as to any third party, and that the Privacy Sandbox APIs will be designed, developed and implemented with regulatory oversight and input from the CMA and the ICO. We also support the objectives set out yesterday in the ICO’s Opinion on Data protection and privacy expectations for online advertising proposals, including the importance of supporting and developing privacy-safe advertising tools that protect people’s privacy and prevent covert tracking.

The revised commitments incorporate a number of changes including:

1. Monitoring and reporting. We have offered to appoint an independent Monitoring Trustee who will have the access and technical expertise needed to ensure compliance.
2. Testing and consultation. We have offered the CMA more extensive testing commitments, along with a more transparent process to take market feedback on the Privacy Sandbox proposals.
3. Further clarity on our use of data. We are underscoring our commitment not to use Google first-party personal data to track users for targeting and measurement of ads shown on non-Google websites. Our commitments would also restrict the use of Chrome browsing history and Analytics data to do this on Google or non-Google websites.

If the CMA accepts these commitments, we will apply them globally.

We continue to appreciate the thoughtful approach and engagement from the CMA and ICO as we develop our Privacy Sandbox proposals. We welcome, and will carefully consider, any comments that people provide during the consultation process.