What You Need to Know: iOS14 Privacy Changes and OpenRTB

Executive Summary:

Apple announced a number of privacy related updates in iOS14, which impact how in-app advertising and attribution works. The IAB Tech Lab’s Programmatic Supply Chain Working Group is releasing a set of extensions to OpenRTB to support these updates, along with a couple of optimizations that we would like to get feedback on.

The Details:

Apple’s WWDC 2020 iOS14 privacy policy announcement has sparked many conversations about the impact on the mobile developer community and the lasting effect it will have on their ad monetization. The changes include a much stricter set of IDFA rules and a new app-install attribution framework–both of which significantly impact the manner in which attribution can be done on iOS. You can read our previous blog post where we discuss the impending changes and their impact to the advertising ecosystem in more detail. 

Since then, Apple seems to have realized that their changes have a far greater impact on the developer community and has recently given the ecosystem more time to adjust to these changes by delaying the enforcement of the IDFA consent opt-in

At the moment (pre-iOS14 final release), our understanding is that the rollout of iOS 14 API / features, namely SKAdNetwork and AppTrackingTransparency, are not impacted. The solutions discussed below are still relevant and we now have time to collectively ensure the new specifications are tested and implemented before Apple’s early 2021 rollout. We hope to engage with Apple and the developer community for feedback on some of the options below (before Apple enforces the changes).

While Apple’s specifications describe how to interface with iOS (apps prompting for the IDFA, using IDFV, registering SKAdNetworks, signing ads, etc), they have not specified how the communication across the various entities involved in delivering ads (SDKs, SSPs, exchanges, DSPs…) should be defined using OpenRTB. The IAB Tech Lab’s Programmatic Supply Chain Working Group has created a set of specifications that enable these features to be supported across the ad delivery supply chain. 

The OpenRTB specifications are available here and include:

  1. An extension to the Bid Request and Bid Response objects to communicate SKAdNetwork information between publishers, SSPs, DSPs, and intermediaries
  2. An extension to the Device object to communicate IDFV and AppTrackingTransparency authorization status
  3. Guidance and tools to help developers manage their Info.plists and work with various Ad SDKs

In addition, while #1 currently provides basic support, we recognize that the SKAdNetwork ID list may become too long and passing all the IDs would make the OpenRTB payload very big. We’ve included two alternate, more efficient proposals for transmitting long/complete lists. 

We are calling for the industry to do the following:

  1. Immediately register for an SKAdNetwork ID if you intend to support SKAdNetwork and sign ads. 
  2. Work on the extensions that support communicating the basic list of SKAdNetwork IDs.
  3. Consider experimenting with the IDFA authorization status (and IDFV if relevant).
  4. Review and provide feedback by October 16th on the more efficient options of communicating the SKAdNetwork IDs — including thoughts on how long the lists are and how varied the lists are across your various partners. 

As always, we believe that collaboration with a clear goal of prioritizing privacy and standardization is the best approach to building solutions that can be successfully implemented. 

What Else Can You Do? 

We call on anyone interested in the topic to join Project Rearc for the larger privacy-centric addressability discussion, in addition to providing feedback on the proposed solutions highlighted above. 


About the Authors

Natalie Binns, Product Manager, Fyber

Jeff Carlson, Manager, Technical Solutions Consulting, Twitter

Amit Shetty, Sr. Director of Product, IAB Tech Lab