After 25 years of thought leadership on privacy and data collection, the NAI is ushering in a new era of self-regulation. With the launch of a new set of privacy principles and a foundational self-regulatory framework that supersedes the legacy 2020 NAI Code of Conduct, the NAI is charting a new course that will set help companies ensure that they have processes and procedures in place to achieve compliance with the constantly evolving legal and regulatory environment. This session, which will feature NAI leadership, NAI members and attorneys who advise ad tech companies, will explore the Framework’s creation, its requirements, the challenges we hope to help solve, and how members can demonstrate compliance. The session will also focus on the future implications and evolution of the Framework and how they impact NAI members and the industry.

Despite a recent focus on data minimization in multiple new state and proposed federal laws, consumer privacy in the U.S. continues to rely largely on a notice-and-choice architecture. But there are, increasingly, competing approaches to providing choices to consumers online. These competing approaches have evolved from voluntary industry opt-out tools; to site-by-site opt-out links mandated by state laws, to global browser or device level settings. This leads to questions about how to navigate these different approaches to get choice right for consumers. In other words – how can we simplify choices for consumers and facilitate business compliance without confusing and frustrating consumers with multiple, dissonant privacy choices? In this panel we will discuss:

• The role of centralized third-party opt-out tools managed by industry self-regulatory groups;

• How GPC is faring with respect to state legal requirements and market uptake; including how direct, business-specific consent choices align with global opt-out preferences set by consumers; 

• The status of the California Privacy Protection Agency’s proposed “DROP” (Delete Request and Opt-Out Platform) for data brokers;

• GPP adoption and implementation;

• Visions for a successful notice and choice framework as these different approaches evolve.

Speakers:

• Susan Rohol, Partner @ Willkie

• Julie Rooney, Chief Privacy Officer @ OpenX

• tbd

• tbd

Consumer privacy legislation continues to evolve across state legislatures every year, resulting in significant divergence across key provisions related to digital advertising. Meanwhile, the U.S. Congress hit the reset button on a national privacy law in 2025. This session will explore the latest key trends across the state and federal legislative landscape, along with a look forward into the proposals that are blazing a new path in U.S. privacy law, as well as the implications for the digital advertising industry. Attendees will learn:

• What are the most challenging provisions across new state laws;

• What does the federal privacy legislative landscape look like, and how might it impact the existing state patchwork;

• What approaches the NAI and digital advertising businesses should be promoting.

Speakers:

• David LeDuc, Vice President, Public Policy @ The NAI

• Elizabeth Frazee, Co-Founder and CEO @ TwinLogic Strategies

• Willy Martinez, Associate  @ Mariner Strategies

• tbd

Aggressive privacy enforcement in the U.S. has continued apace through 2024 and into 2025.  This has included new activity from now-mainstay regulators like the California Privacy Protection Agency and the Federal Trade Commission; but now also includes new states whose privacy laws have come online for the first time. But across jurisdictions, privacy enforcement has continued to focus on ad-tech and associated data flows. This session will feature expert privacy attorneys who represent ad-tech companies across the table from regulators, and provide an on-the-ground perspective on the most important regulatory trends impacting digital advertising companies at the state and federal level. Attendees will learn:

• Updates on activity from different regulators, including FTC, CPPA, and state AGs; as well as 

• Specific areas of focus across jurisdictions, including enforcement activity related to:

  • Data brokers

  • The use of sensitive data (including health and location-related data) for audience segmentation, and regulator reception of methods to decrease risk like de-identification and rendering data non-sensitive

  • Consumer choice mechanisms, including how companies are obtaining (or failing to obtain) consent.

• What to expect for the remainder of 2025, both from new states beginning to enforce their privacy laws as well as an FTC under new leadership.

Speakers:

• Ken Dreifach, Partner @ ZwillGen

• Daniel Goldberg, Partner @ Frankfurt Kurnit

• Jessica Lee, Chief Privacy & Security Partner; Chair, Privacy, Security & Data Innovations @ Loeb&Loeb

• Tracy Shapiro, Partner, Privacy & Cybersecurity @ Wilson Sonsini Goodrich & Rosati

U.S.-based ad-tech providers have spent recent years getting up to speed on new consumer privacy requirements, including new consumer rights to opt out of “sales,” to request data deletion, and the need for consent before processing “sensitive” personal data. However, unlike their European counterparts, U.S.-based ad-tech companies have not had to contend with compliance requirements for cross-border data flows such as adequacy decisions, standard contractual clauses, or the like.  

However, the passage of the Protect Americans’ Data From Foreign Adversaries Act (PADFAA) and the finalization of the DOJ’s rule banning bulk sales of U.S. sensitive personal data to countries of concern have upended the status quo.  In this session, attendees will learn about:

• The policy considerations motivating new restrictions on cross-border data transfers;

• How PADFAA and the DOJ rule are expected to apply to common ad-tech data flows;

• Compliance considerations for preventing transfers of U.S. personal data to entities controlled by "countries of concern”and for managing other regulated data flows; and

• Outlook for enforcement and further guidance from DOJ and FTC.

Speakers:

• Chris Hoofnagle, Faculty Director & Professor of Law in Residence @ Berkeley Center for Law & Technology

• Sam Castic, Partner @ Hintze Law

• Ghita Harris-Newton, Senior Director, Government Affairs & Public Policy, Ads @ Google

• tbd

Hear from the Head of the Federal Trade Commission.

There have been ongoing efforts for years to standardize and drive adoption of more private advertising standards by leveraging technologies and standards including clean rooms, TEEs (Trusted Execution Environments), Privacy Sandbox standards, etc.  But where are the fruits of those labors? On this panel, we’ll hear from companies that are actively implementing these methods to get a snapshot into what problems, how widely they’re being adopted, and whether they are driving business results. Attendees will learn:

• What privacy-enhancing methods and standards are gaining traction?

• What privacy benefits are being realized today?

• How effective are these methods compared to status quo?

• Hopes and plans for the future of these methods

Speakers:

• Dennis Buchheim, Founder & CEO @ Thinkmedium

• Sarah Barrows, Global Head of Privacy and Product Counsel @ NextRoll

• Ari Levenfeld, Senior Manager, Government Affairs and Public Policy, Ads Google @ Google

• tbd