“Many businesses will be looking back at their integrations and implementation strategies in detail, including us.” The three - month notice given to French mobile ad ##tech company Vectaury to comply with the General Data Protection Regulation ( GDPR ) by data protection regulator CNIL is a wake - up call for the entire adtech sector . Vectaury had collected geolocation data from its software development kit in mobile apps and used the data without receiving permission . The CNIL also ruled that a company can not assume consent based on a contractual agreement , meaning the company must " demonstrate , for all the data it processes today , the validity of the expressed consent " .
The three - month notice given to French mobile ad ##tech company Vectaury to comply with the General Data Protection Regulation ( GDPR ) by data protection regulator CNIL is a wake - up call for the entire adtech sector . Vectaury had collected geolocation data from its software development kit in mobile apps and used the data without receiving permission . The CNIL also ruled that a company can not assume consent based on a contractual agreement , meaning the company must " demonstrate , for all the data it processes today , the validity of the expressed consent " .