Digital Advertising Vendor Review Guide

Digital advertising relationships carry data processing obligations that most organizations haven't fully documented yet. Here's what the review should actually involve:

• How data actually flows through a media agency relationship, including identity resolution and what "hashed" data does and doesn't mean
• The processor-by-direction distinction — and why a vendor who never sees your data can still be liable as a processor
• How to evaluate vendor disclosures for completeness, consistency, and honesty
• What must be resolved before contract execution, and what belongs in the DPA
• A plain-language question bank for vendor conversations

If you have questions after reading this guide, are unsure where to start with a vendor assessment, or want to think through an existing relationship, feel free to reach out directly.