Data clean room

{{Short description|Secure exchange of first-party data}}

{{Use American English|date=December 2024}}

The data clean room (DCR) is a secure, intermediary, cloud service used among companies to mutually agree on sharing and collaborating on sensitive first-party data, which is data that is collected directly from customers and consumers.{{Cite web |last=Schiff |first=Allison |date=2024-11-18 |title=The FTC Thinks Data Clean Rooms May Have A Few Dusty Corners |url=https://www.adexchanger.com/data-privacy-roundup/the-ftc-thinks-data-clean-rooms-may-have-a-few-dusty-corners/ |access-date=2024-12-09 |website=AdExchanger |language=en-US}} Otherwise, organizations would use anonymized and obfuscated data to help preserve sensitive first-party data, such as personal identifiable information (PII).

Organizations and groups that may use data include brands, publishers, advertisers, and groups within a company.{{Cite web |last=Durga |first=Apoorv |date=2023-07-12 |title=Data clean rooms: A beginner's guide |url=https://martech.org/data-clean-rooms-a-beginners-guide/ |access-date=2025-01-29 |website=MarTech |language=en}} Each group involved will create a contract that governs what each participant can and cannot do with the additional data. With organizations using other organizations' first-party data (third-party data) through DCRs, some say "third-party data has now become a first-class citizen in the information ecosystem".{{Cite web |last=Bridgwater |first=Adrian |title=Third-Party Data Is Now First-Class |url=https://www.forbes.com/sites/adrianbridgwater/2023/04/21/third-party-data-is-now-first-class/ |access-date=2025-01-14 |website=Forbes |language=en}}

Early data clean rooms started as data-sharing products within walled gardens, including Google's Ads Data Hub. And in 2018, this product was the only way to use Google ad data in Europe due to the General Data Protection Regulation (GDPR).

On July 5, 2023, IAB Tech Lab, a non-profit consortium that develops open technical standards for the ad-supported digital economy, released a set of common principles and operating recommendations on using DCRs.{{Cite web |last=Hercher |first=James |date=2023-07-05 |title=IAB Tech Lab Blesses Its First Set Of Data Clean Room Specs |url=https://www.adexchanger.com/ad-exchange-news/iab-tech-lab-gives-its-blessing-to-its-first-of-data-clean-room-specs/ |access-date=2024-12-10 |website=AdExchanger |language=en-US}}

Motivations

The creation of DCRs was needed after the deprecation of third-party cookie data with Apple's AppTrackingTransparent (ATT) framework.{{Cite web |last=Boyle |first=Alyssa |date=2023-01-19 |title=How Albertsons Is Piloting Pinterest's New Clean Room |url=https://www.adexchanger.com/data-exchanges/how-albertsons-is-piloting-pinterests-new-clean-room/ |access-date=2025-01-02 |website=AdExchanger |language=en-US}} In 2023, IAB Tech Lab released the Open Private Join and Activation (OPJA) specification to help with clean room interoperability among clean room providers.{{Cite web |date=2024-11-13 |title=Data Clean Rooms: Separating Fact from Fiction |url=https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2024/11/data-clean-rooms-separating-fact-fiction |access-date=2024-12-07 |website=Federal Trade Commission |language=en}}

The demand for data clean rooms has also increased because of the Europe's GDPR law, potential fears from data breaches such as the Facebook–Cambridge Analytica data scandal, and how some advertisers don't know the data they are purchasing.{{Cite web |last=Joseph |first=Seb |date=2023-03-20 |title=WTF is a data clean room? |url=https://digiday.com/marketing/data-clean-room/ |access-date=2025-01-14 |website=Digiday |language=en-US}}

Examples

In 2019, The Hershey Company pitched the idea of a data clean room to retailers to help "get data needed to see whether its ads encourage people to buy its chocolate bars." The data clean room would allow retailers to store their loyalty card data along with ad exposure data. However, retailers resisted the idea, instead wanting the data to be in a closed platform.{{Cite web |last=Joseph |first=Seb |date=2019-02-05 |title=Hershey's is pitching a 'clean room' for data sharing to retailers |url=https://digiday.com/media/hersheys-pitching-clean-room-data-sharing-retailers/ |access-date=2025-01-14 |website=Digiday |language=en-US}}

In 2023, Pinterest announced that it will be using a data clean room solution from LiveRamp with Albertsons in their efforts to make Pinterest into an ecommerce platform.

Colt Technology Services has a travel platform that integrates with third party data so that employees are able to see emissions data and help them decide on choices for more sustainable travel.

In 2022, Acrisure bought the naming rights to the NFL stadium of the Pittsburgh Steelers.{{Cite web |last=Osdol |first=Paul Van |date=2022-07-12 |title=What is Acrisure? Steelers' stadium has new name; here's what we know about the company |url=https://www.wtae.com/article/what-is-acrisure-steelers-heinz-field-new-name/40579084 |access-date=2025-01-23 |website=WTAE |language=en}} Hypothetically, if Acrisure wants to measure the sponsorship value of renaming the stadium, they could partner with Ticketmaster or Kraft Heinz to measure whether fans would support the name change.{{Cite web |last=Hercher |first=James |date=2022-07-25 |title=AdExplainer: Data Clean Rooms |url=https://www.adexchanger.com/data-exchanges/adexplainer-data-clean-rooms/ |access-date=2025-01-23 |website=AdExchanger |language=en-US}}

Benefits

Using DCRs allow organizations to collaborate with other organizations and their data in hopes to deliver "new business opportunities and enhanced customer experiences" and is possibly "changing the way organizations collaborate, analyse and derive insights from data, enabling them to unlock new opportunities for growth and success". This data collaboration is also done where participants in the exchange are unable to see each other's raw data.

Challenges

Some key challenges for using data clean rooms include:

  • Agreeing on the scope of data shared
  • Governance and monitoring
  • Finding partners to agree on a shared clean room
  • Data clean rooms not completely solving privacy and data sharing issues
  • Technical challenges of integrating the data exchange with the rest of an organization's software stack

Privacy conerns

According to the Federal Trade Commission (FTC), DCRs do not necessarily mean these solutions are private and thus could lead to privacy washing. Privacy washing occurs when a company claims to prioritize data protections for its customers' data, but actually fails to implement best practices for securing the data.{{Cite web |last=Joyce |date=2021-05-03 |title=Privacy-Washing: What Is It And How To Stop It From Happening To Your Company |url=https://calawyers.org/business-law/privacy-washing-what-is-it-and-how-to-stop-it-from-happening-to-your-company/ |access-date=2024-12-10 |website=California Lawyers Association |language=en-US}} In other words, DCRs may facilitate the exchange of data between untrusted parties.

Corporations who operate clean rooms argue against these privacy concerns. Matt Karasick, VP of product at LiveRamp, claims that when DCRs are implemented properly, privacy policies are adhered to. He also emphasizes that when using DCR automated data protections, no consumer data is shared using clean rooms. Vlad Stesin, co-founder and chief strategy officer at a DCR company Optable, also comments that DCRs "need to be part of a broader approach to data collaboration" in order to both adhere to privacy needs and create business value.

More criticisms of DCRs include more accurately describing them as "secure" rather than "private" due to data clean rooms being owned by data companies that have their own identity graph data to connect to.{{Cite web |last=AdExchanger |date=2024-10-25 |title=Don't Hate, Collaborate; Getting Closure On Disclosures |url=https://www.adexchanger.com/daily-news-roundup/friday-25102024/ |access-date=2025-01-02 |website=AdExchanger |language=en-US}}

Types of data clean rooms

Each owner of the data clean room has more influence on the governance of the data exchanged. Moreover, data clean rooms can be categorized into five categories:

  1. Specialized data clean rooms (relatively small firms with a limited market)
  2. Data warehouses and data lakes (e.g., Snowflake, Google, AWS, and Databricks)
  3. Walled gardens and media companies (e.g., Google and Meta)
  4. Data onboarding vendors (offer other services like identity resolution and data marketplaces)
  5. Customer data platforms (e.g., Adobe and Blueconic)

Companies

A list of some companies that operate and offer data clean room solutions include:

  • InfoSum{{Cite news |last=Bruell |first=Alexandra |date=2021-08-17 |title=InfoSum Raises $65 Million as Companies Prioritize Data-Privacy |url=https://www.wsj.com/articles/infosum-raises-65-million-as-companies-prioritize-data-privacy-11629194401 |access-date=2024-12-10 |work=The Wall Street Journal}}
  • Optable{{Cite web |last=Vargas |first=Anthony |date=2023-04-18 |title=With Data Fragmentation On The Rise, Clean Room Optable Secures $20M Series A |url=https://www.adexchanger.com/investment/with-data-fragmentation-on-the-rise-clean-room-optable-secures-20m-series-a/ |access-date=2024-12-10 |website=AdExchanger |language=en-US}}
  • Google's Ads Data Hub{{Cite web |last=Schiff |first=Allison |date=2021-01-15 |title=It's Official: YouTube No Longer Accepts Third-Party Pixels |url=https://www.adexchanger.com/platforms/its-official-youtube-no-longer-accepts-third-party-pixels/ |access-date=2025-01-23 |website=AdExchanger |language=en-US}}
  • Amazon AWS' Amazon Marketing Cloud{{Cite web |last=Bridgwater |first=Adrian |title=AWS CEO Selipsky: We Are Making Cloud Easier To Use |url=https://www.forbes.com/sites/adrianbridgwater/2022/12/01/aws-ceo-selipsky-we-are-making-cloud-easier-to-use/ |access-date=2024-12-10 |website=Forbes |language=en}}{{Cite web |last=Hercher |first=James |date=2021-10-26 |title=After A Two-Year Quiet Phase, Amazon's Data Clean Room Service Enters The Market |url=https://www.adexchanger.com/online-advertising/after-a-two-year-quiet-phase-amazons-data-clean-room-service-enters-the-market/ |access-date=2025-01-23 |website=AdExchanger |language=en-US}}
  • Roku, Inc.{{Cite web |last=McNally |first=Victoria |date=2025-01-06 |title=Roku's Clean Room Evolves Into Its New Form: The Roku Data Cloud |url=https://www.adexchanger.com/tv/rokus-clean-room-evolves-into-its-new-form-the-roku-data-cloud/ |access-date=2025-01-23 |website=AdExchanger |language=en-US}}
  • Paramount Pictures{{Cite web |last=Boyle |first=Alyssa |date=2023-06-20 |title=Paramount Wants Its Competitors To Use Its New Clean Room |url=https://www.adexchanger.com/data-exchanges/paramount-wants-its-competitors-to-use-its-new-clean-room/ |access-date=2025-01-23 |website=AdExchanger |language=en-US}}
  • The Walt Disney Company{{Cite web |last=Boyle |first=Alyssa |date=2022-12-01 |title=Disney Integrates With VideoAmp To Bolster Its Clean Room With Measurement |url=https://www.adexchanger.com/digital-tv/disney-integrates-with-videoamp-to-bolster-its-clean-room-with-measurement/ |access-date=2025-01-23 |website=AdExchanger |language=en-US}}
  • NBCUniversal{{Cite web |last=Boyle |first=Alyssa |date=2023-02-09 |title=One23: NBCUniversal Highlights Measurement, Data And Playing Nice |url=https://www.adexchanger.com/tv-2/one23-nbcuniversal-highlights-measurement-data-and-maybe-playing-nice/ |access-date=2025-01-23 |website=AdExchanger |language=en-US}}

With the rise of data clean rooms, there was a consolidation of companies offering data clean rooms. This consolidation meant eliminating friction of using multiple venders, valuing ease of use over flexible pricing, and questionable interoperability among service providers.{{Cite web |last=Frattaroli |first=Matt |date=2024-04-10 |title=Will Clean Room Consolidation Actually Make Collaboration Easier? |url=https://www.adexchanger.com/data-driven-thinking/will-clean-room-consolidation-actually-make-collaboration-easier/ |access-date=2025-01-23 |website=AdExchanger |language=en-US}}

A list of data clean room acquisitions:

  • Habu (acquired by LiveRamp in 2023){{Cite web |last=Hercher |first=James |date=2024-01-18 |title=LiveRamp Acquires Habu, As Walled Gardens Put The Squeeze On Indie Data Collaboration Tech |url=https://www.adexchanger.com/platforms/liveramp-acquires-habu-as-walled-gardens-put-the-squeeze-on-indie-data-collaboration-tech/ |access-date=2024-12-10 |website=AdExchanger |language=en-US}}
  • Samooha (acquired by Snowflake in 2023){{Cite web |title=Snowflake Acquires Samooha |url=https://www.snowflake.com/en/blog/snowflake-to-acquire-samooha/ |access-date=2025-01-02 |website=www.snowflake.com |language=en}}{{Cite web |last=Whiting |first=Rick |title=Snowflake To Expand Data Clean Room Service Offering With Acquisition |url=https://www.crn.com/news/software/snowflake-to-expand-data-clean-room-service-offering-with-acquisition |access-date=2025-01-23 |website=www.crn.com}}

See also

References

{{reflist}}

Further reading

  • [https://iabtechlab.com/blog/wp-content/uploads/2023/06/Data-Clean-Room-Guidance_Version_1.054.pdf Data Clean Rooms - Guidance and Recommended Practices Version 1.0 - IAB Tech Lab] (Released July 5, 2023)
  • [https://iabtechlab.com/opja/ Open Private Join and Activation (OPJA) specification] (Released February 14, 2024)
  • [https://liveramp.com/data-clean-rooms/ Data Clean Rooms: Everything You Need to Know - LiveRamp] (Released Oct 5, 2022)

Category:Data security

Category:Information sensitivity

Category:As a service