Episode 42: Contextual Integrity in the ads space - The Monopoly Report

Summary

The Monopoly Report: Episode 42 – Contextual Integrity in the Ads Space

Release Date: August 13, 2025
Host: Alan Chappelle
Guest: Professor Helen Nissenbaum
Description: An in-depth exploration of privacy concerns within the advertising technology sector, focusing on the theory of contextual integrity and its implications for first-party and third-party data.

1. Introduction

In Episode 42 of The Monopoly Report, host Alan Chappelle engages in a thought-provoking conversation with Professor Helen Nissenbaum, a renowned scholar in information science and privacy. The discussion delves into the intricate relationship between privacy, data flow, and advertising technology, emphasizing the importance of contextual integrity in maintaining societal and individual privacy standards.

2. Understanding Contextual Integrity

Professor Nissenbaum introduces the foundational concept of contextual integrity, a theory that redefines privacy not merely as secrecy or control over personal information but as appropriate data flow constrained by contextual norms.

Helen Nissenbaum [02:50]: "The important aspect of privacy that contextual integrity tries to grab onto is the idea of appropriate flow. So what we mean by appropriate flow, according to this theory, is flow that is constrained by certain contextual norms."

Contextual integrity asserts that data flow should align with societal norms specific to different contexts, ensuring that personal information is shared appropriately and responsibly.

3. First-Party vs. Third-Party Data

The conversation begins with a critical examination of the ad industry's reliance on the distinction between first-party and third-party data. While industry self-regulatory codes and prior FTC support suggest that first-party data is inherently more privacy-safe, Professor Nissenbaum challenges this notion.

Helen Nissenbaum [02:50]: "I do think it's misguided... first parties are more acceptable in receiving information about us. But there's nothing required in that."

She explains that the appropriateness of data sharing depends more on contextual factors—such as who the data recipient is and the nature of the data—rather than the first-party or third-party designation alone.

4. Consumer Expectations and Privacy Norms

Professor Nissenbaum emphasizes the role of consumer expectations as indicators of established privacy norms. When expectations are unmet, such as discovering that ads originate from third-party networks rather than the host website, consumers often react negatively.

Helen Nissenbaum [06:05]: "Expectation is a signal that there's a norm in place... when the expectation is not met... they may be shocked. And this doesn't meet expectations."

This highlights the importance of transparency in data practices to maintain trust and adherence to societal privacy norms.

5. Surveillance Capitalism and Profile Building

A significant portion of the discussion addresses the problematic nature of surveillance capitalism, where continuous monitoring and data collection enable extensive user profiling for targeted advertising.

Helen Nissenbaum [15:08]: "I want to set that aside. But the idea that you need to monitor people's activities 24/7 online in order to create profiles for advertising, it seemed to kill a flea with a cannon."

She criticizes the extensive surveillance practices required for behavioral advertising, questioning the balance between data collection and the value it provides to advertisers.

6. Privacy-Enhancing Technologies

The conversation explores various privacy-enhancing technologies (PETs) aimed at mitigating privacy risks in the ad space:

Third-Party Cookie Restriction: Limiting or eliminating third-party cookies to reduce unauthorized tracking.

Helen Nissenbaum [29:07]: "When you looked at that slogan we don't share with third parties... you could say that was the technical instantiation of this high level."

Data Primitives vs. Inferences: Distinguishing between raw data collection and the inferences drawn from it, challenging the perception that only primitive data poses privacy concerns.
Federated Learning: Conducting data analysis on user devices to prevent the centralization of personal data.

Professor Nissenbaum critiques these technologies, arguing that merely limiting data access does not fully address privacy concerns, especially when powerful entities can still exploit minimal data points when combined with existing information.

7. Data Minimization and Ownership Issues

Alan Chappelle raises concerns about data ownership and the anti-competitive behaviors of major tech companies, such as Google and Meta, which centralize vast amounts of user data across their subsidiaries.

Helen Nissenbaum [42:14]: "We've taken ownership as a proxy for context. And so we've said I'm the first party if I'm Microsoft and any companies I own by definition are first parties. And that doesn't live with the spirit of the first party third party."

This centralization undermines the first-party versus third-party data distinction, as ownership does not necessarily equate to better privacy practices. The monopolistic aggregation of data by a few large entities poses significant privacy and competitive challenges.

8. Consent and Regulatory Challenges

The episode critiques the overreliance on consent within privacy regulations, particularly in the EU, where obtaining consent for data usage often leads businesses to collect excessive data rather than fostering genuine privacy protections.

Helen Nissenbaum [45:31]: "Consent is neither necessary nor sufficient for appropriate data flow."

She advocates for a more nuanced approach to privacy that goes beyond consent, emphasizing the need for regulations that enforce appropriate data handling based on contextual integrity rather than mere user permissions.

9. Conclusion

Alan Chappelle and Professor Helen Nissenbaum find common ground in their skepticism toward current data practices in the ad industry. They agree that the focus should shift from quantifying data points to understanding the nature and context of data usage. Incorporating contextual integrity into advertising workflows could lead to more responsible data practices that respect both individual and societal privacy.

Alan Chappelle [46:44]: "If we could figure out a mechanism where we could agree on what is reasonable in terms of number of profiles, scale sensitivity, I think that would be a better place to be..."

The episode underscores the necessity for the ad tech industry to adopt more robust privacy frameworks that align with contextual integrity, ensuring that data flows are appropriate, transparent, and beneficial for all stakeholders involved.

Notable Quotes with Timestamps

Professor Helen Nissenbaum [02:50]: "I do think it's misguided... first parties are more acceptable in receiving information about us. But there's nothing required in that."
Professor Helen Nissenbaum [06:05]: "Expectation is a signal that there's a norm in place... when the expectation is not met... they may be shocked. And this doesn't meet expectations."
Professor Helen Nissenbaum [15:08]: "I want to set that aside. But the idea that you need to monitor people's activities 24/7 online in order to create profiles for advertising, it seemed to kill a flea with a cannon."
Professor Helen Nissenbaum [29:07]: "When you looked at that slogan we don't share with third parties... you could say that was the technical instantiation of this high level."
Professor Helen Nissenbaum [42:14]: "We've taken ownership as a proxy for context. And so we've said I'm the first party if I'm Microsoft and any companies I own by definition are first parties. And that doesn't live with the spirit of the first party third party."
Professor Helen Nissenbaum [45:31]: "Consent is neither necessary nor sufficient for appropriate data flow."
Alan Chappelle [46:44]: "If we could figure out a mechanism where we could agree on what is reasonable in terms of number of profiles, scale sensitivity, I think that would be a better place to be..."

Final Thoughts

Episode 42 of The Monopoly Report provides a comprehensive analysis of the current privacy landscape within the advertising industry. By introducing and elaborating on the theory of contextual integrity, Professor Nissenbaum offers valuable insights into how data should be managed and regulated to protect both individual privacy and societal norms. The dialogue between Chappelle and Nissenbaum highlights the urgent need for the ad tech sector to rethink its data practices, moving beyond simplistic classifications of data and towards a more contextual and principled approach to privacy.

For listeners interested in the intersection of technology, privacy, and regulation, this episode serves as a crucial resource for understanding the complexities and proposing pathways toward a more equitable and respectful data ecosystem.

Subscribe to The Monopoly Report
Stay informed on the latest developments in antitrust and regulatory impacts on the global advertising economy by subscribing to our newsletter at monopoly-report.com and tuning into our podcasts at monopolyreportpod.com. Join us for more insightful discussions with industry experts in upcoming episodes.

Transcript

Podcast Host (0:00)

This podcast is brought to you by audiohook, the leading independent audio dsp. Audiohook has direct publisher integrations into all major podcast and streaming radio platforms, providing 40% more inventory than what could be accessed in omnichannel DSPs. What's more, audiobook has full transcripts on more than 90% of all podcast inventory, enabling advanced contextual targeting and brand suitability. Audio Hook is so confident that in addition to CPM buys, they offer the industry's only pay for performance option where brands can scale audio and podcasting with peace of mind mind knowing they are only paying for outcomes. Visit audiohook.com to learn more. That's audiohook.com.

Alan Chappelle (0:51)

Welcome to the Monopoly Report the Monopoly Report is dedicated to chronicling and analyzing the impact of antitrust and other regulations on the global advertising economy. If you are new to the Monopoly Report, you can subscribe to our weekly newsletter@monopoly-report.com and you can check out all of the Monopoly report podcasts@monopolyreportpod.com I'm Alan Chappelle. This week my guest is Professor Helen Nissenbaum. Professor Nissenbaum is the Andrew H. And Ann R. Tisch professor of Information Science and the founding Director of the Digital Life Initiative at Cornell Tech. Her research spans issues of bias, trust, security, public autonomy and accountability in digital systems, most notably privacy as contextual integrity. While Professor Nissenbaum is really accomplished, she is not necessarily an expert in the ad space. Nonetheless, she has written on a bunch of topics like profiling and privacy enhancing technologies, and Helen is an influential voice within the larger privacy community. She is also someone who has been critical of the ad space and I think it's really important for all of us to listen to our critics. So let's get to it. Hi Helen, thanks for coming on the pod. How are you?

Helen Nissenbaum (2:07)

I'm fine. Hi Ellen, thanks for having me.

Alan Chappelle (2:10)

I'm really looking forward to this discussion and hopefully we can we can get this done before the big thunderstorm that's apparently heading to the east coast comes. Yes, my first question is this so the conventional view is is that first party data is more privacy safe than third party data and that view has been encapsulated into the ad industry self regulatory codes and it was a concept that was arguably even supported by the FTC years ago. So can you summarize your understanding of what first party data is and share why you think that notion that first party might be better? It might be misguided?

Helen Nissenbaum (2:50)

I do think it's misguided and I hope you'll forgive me, because to explain why, I need to talk a little bit about the theory of contextual integrity. There are two common views on privacy. One is that privacy is akin to secrecy. So you have more privacy if the data is withheld and kept secret. And you'll often see that concept of privacy at play in computer science material, even though it's not completely explicated as such. And there's the view of privacy as control over information about yourself. Now, contextual integrity, it partly absorbs those two intuitions, but mainly the starting position is that data flows, and often flow of data is very productive, and we need it, society needs it, different values needed, like health or commerce and so on. So the important aspect of privacy that contextual integrity tries to grab onto is the idea of appropriate flow. So what we mean by appropriate flow, according to this theory, is flow that is constrained by certain contextual norms. They're like social norms or social rules. And those rules depend on various, what I call parameters. But you can say factors. One of the factors is the recipient of the data. So who's getting the data? Like, who's sharing it, who's it about, what kind of data it is, and under what constraints is the data being shared. Now, sometimes a recipient of the data, which we can think about as the first party recipient of the data, could be a problematic recipient. So, for example, if you're commonly, we hear these kinds of examples, you're law enforcement and you're surveilling a population and you're placing people under, you know, there's facial recognition and so on, that is not considered acceptable in a democratic society, then even the first party can be considered problematic. So it really depends on these other factors to determine whether first party or third party. Now, as a matter of fact, it's often the case that when we are sharing information with first parties, we're doing it in a very conscious way. And so as a matter of fact, if you look at the cases of first parties and third parties, we often find that first parties are more acceptable in receiving information about us. But there's nothing required in that.