Data Clean Room
   HOME

TheInfoList



OR:

The data clean room (DCR) is a secure, intermediary, cloud service used among companies to mutually agree on sharing and collaborating on sensitive first-party data, which is data that is collected directly from customers and consumers. Otherwise, organizations would use anonymized and obfuscated data to help preserve sensitive first-party data, such as personal identifiable information (PII). Organizations and groups that may use data include brands, publishers, advertisers, and groups within a company. Each group involved will create a contract that governs what each participant can and cannot do with the additional data. With organizations using other organizations' first-party data (third-party data) through DCRs, some say "third-party data has now become a first-class citizen in the information ecosystem". Early data clean rooms started as data-sharing products within walled gardens, including Google's Ads Data Hub. And in 2018, this product was the only way to use Google ad data in Europe due to the General Data Protection Regulation (GDPR). On July 5, 2023, IAB Tech Lab, a non-profit consortium that develops open technical standards for the ad-supported digital economy, released a set of common principles and operating recommendations on using DCRs.


Motivations

The creation of DCRs was needed after the deprecation of third-party cookie data with Apple's AppTrackingTransparent (ATT) framework. In 2023, IAB Tech Lab released the Open Private Join and Activation (OPJA) specification to help with clean room interoperability among clean room providers. The demand for data clean rooms has also increased because of the Europe's GDPR law, potential fears from data breaches such as the Facebook–Cambridge Analytica data scandal, and how some advertisers don't know the data they are purchasing.


Examples

In 2019,
The Hershey Company The Hershey Company, often called just Hershey or Hershey's, is an American multinational corporation, multinational confectionery company headquartered in Hershey, Pennsylvania, which is also home to Hersheypark and Hershey's Chocolate World. T ...
pitched the idea of a data clean room to retailers to help "get data needed to see whether its ads encourage people to buy its chocolate bars." The data clean room would allow retailers to store their loyalty card data along with ad exposure data. However, retailers resisted the idea, instead wanting the data to be in a closed platform. In 2023, Pinterest announced that it will be using a data clean room solution from LiveRamp with
Albertsons Albertsons Companies, Inc. is an American grocery company founded and headquartered in Boise, Idaho. With 2,253 stores as of the third quarter of fiscal year 2020 and 270,000 employees as of fiscal year 2019, the company is the second-large ...
in their efforts to make Pinterest into an ecommerce platform. Colt Technology Services has a travel platform that integrates with third party data so that employees are able to see emissions data and help them decide on choices for more sustainable travel. In 2022, Acrisure bought the naming rights to the NFL stadium of the
Pittsburgh Steelers The Pittsburgh Steelers are a professional American football team based in Pittsburgh. The Steelers compete in the National Football League (NFL) as a member of the American Football Conference (AFC) AFC North, North division. Founded in 1933 P ...
. Hypothetically, if Acrisure wants to measure the sponsorship value of renaming the stadium, they could partner with Ticketmaster or
Kraft Heinz The Kraft Heinz Company (KHC), commonly known as Kraft Heinz (), is an American multinational food company formed by the merger of Kraft Foods Group, Inc. and the H.J. Heinz Company co-headquartered in Chicago and Pittsburgh. Kraft Heinz is t ...
to measure whether fans would support the name change.


Benefits

Using DCRs allow organizations to collaborate with other organizations and their data in hopes to deliver "new business opportunities and enhanced customer experiences" and is possibly "changing the way organizations collaborate, analyse and derive insights from data, enabling them to unlock new opportunities for growth and success". This data collaboration is also done where participants in the exchange are unable to see each other's raw data.


Challenges

Some key challenges for using data clean rooms include: * Agreeing on the scope of data shared * Governance and monitoring * Finding partners to agree on a shared clean room * Data clean rooms not completely solving privacy and data sharing issues * Technical challenges of integrating the data exchange with the rest of an organization's software stack


Privacy conerns

According to the Federal Trade Commission (FTC), DCRs do not necessarily mean these solutions are private and thus could lead to privacy washing. Privacy washing occurs when a company claims to prioritize data protections for its customers' data, but actually fails to implement best practices for securing the data. In other words, DCRs may facilitate the exchange of data between untrusted parties. Corporations who operate clean rooms argue against these privacy concerns. Matt Karasick, VP of product at LiveRamp, claims that when DCRs are implemented properly, privacy policies are adhered to. He also emphasizes that when using DCR automated data protections, no consumer data is shared using clean rooms. Vlad Stesin, co-founder and chief strategy officer at a DCR company Optable, also comments that DCRs "need to be part of a broader approach to data collaboration" in order to both adhere to privacy needs and create business value. More criticisms of DCRs include more accurately describing them as "secure" rather than "private" due to data clean rooms being owned by data companies that have their own identity graph data to connect to.


Types of data clean rooms

Each owner of the data clean room has more influence on the governance of the data exchanged. Moreover, data clean rooms can be categorized into five categories: # Specialized data clean rooms (relatively small firms with a limited market) # Data warehouses and data lakes (e.g., Snowflake, Google, AWS, and Databricks) # Walled gardens and media companies (e.g., Google and Meta) # Data onboarding vendors (offer other services like identity resolution and data marketplaces) # Customer data platforms (e.g., Adobe and Blueconic)


Companies

A list of some companies that operate and offer data clean room solutions include: * InfoSum * Optable * Google's Ads Data Hub * Amazon AWS' Amazon Marketing Cloud * Roku, Inc. *
Paramount Pictures Paramount Pictures Corporation, commonly known as Paramount Pictures or simply Paramount, is an American film production company, production and Distribution (marketing), distribution company and the flagship namesake subsidiary of Paramount ...
*
The Walt Disney Company The Walt Disney Company, commonly referred to as simply Disney, is an American multinational mass media and entertainment conglomerate headquartered at the Walt Disney Studios complex in Burbank, California. Disney was founded on October 16 ...
*
NBCUniversal NBCUniversal Media, LLC (abbreviated as NBCU and Trade name, doing business as NBCUniversal or Comcast NBCUniversal since 2013) is an American Multinational corporation, multinational mass media and Show business, entertainment conglomerate (comp ...
With the rise of data clean rooms, there was a consolidation of companies offering data clean rooms. This consolidation meant eliminating friction of using multiple venders, valuing ease of use over flexible pricing, and questionable interoperability among service providers. A list of data clean room acquisitions: * Habu (acquired by LiveRamp in 2023) * Samooha (acquired by Snowflake in 2023)


See also

* Walled garden (technology) * Confidential computing * Privacy-enhancing technologies *
Differential privacy Differential privacy (DP) is a mathematically rigorous framework for releasing statistical information about datasets while protecting the privacy of individual data subjects. It enables a data holder to share aggregate patterns of the group while ...
*
Information privacy Information privacy is the relationship between the collection and dissemination of data, technology, the public expectation of privacy, contextual information norms, and the legal and political issues surrounding them. It is also known as dat ...


References

{{reflist


Further reading


Data Clean Rooms - Guidance and Recommended Practices Version 1.0 - IAB Tech Lab
(Released July 5, 2023)
Open Private Join and Activation (OPJA) specification
(Released February 14, 2024)
Data Clean Rooms: Everything You Need to Know - LiveRamp
(Released Oct 5, 2022) Data security Information sensitivity As a service