US lawmakers ask 8 digital-ad auctioneers, including Google and AT&T, to name foreign clients who had access to user data through auctions over the past 3 years
including location, browsing history and demographic details—may be sent to hundreds of companies bidding .. any company participating in the auction can access user information without having to bid.// https://www.wsj.com/... David Carroll / @profcarroll : The systemic data breach known as real time bidding has attracted the interest of US Senators who have demanded information on foreign access to bidstream data aided and abetted by adtech's ludicrous business model. Exclusive by @patiencehaggin https://www.wsj.com/... John Wilander / @johnwilander : “The barriers to join these auctions are low, and any company participating in the auction can access user information (...) [adtech was asked to] provide the names of all foreign clients who had access to user data through auctions over the past 3 years.” https://www.wsj.com/... Myles Younger / @myles_younger : 1/ Keep in mind that addressable digital advertising with a 3P ecosystem allows virtually anyone to not just serve ADS to specific groups of people, but to make those people unwitting participants in SOFTWARE APPLICATIONS. https://www.wsj.com/... Wolfie Christl / @wolfiechristl : The way digital advertising works today implies that myriads of companies share personal data on millions with shady actors every second. A group of US senators asked major adtech firms who they share data with. Spoiler: It won't be easy to answer this. https://www.wsj.com/... John Wilander / @johnwilander : Maybe sending your personal information to hundreds of third parties as you browse the web wasn't a good idea? Maybe such a system can be used against you and your country? Maybe it wasn't all about those shoes you left in your shopping cart? But it was profitable! https://twitter.com/... Dave Morgan / @davemorgannyc : Very good to see Congress & regulators looking into the enormous and deep personal data leakage that is standard operating procedure at many digital & mobile ad exchanges and platforms @patiencehaggin https://www.wsj.com/... @patiencehaggin : Sen. @RonWyden spearheaded the effort to make digital-ad auction companies reveal foreign companies that have received their user data
Context & Ripple Effects
Sen. Ron Wyden's letter to eight auctioneers — including Google and AT&T — extends a multi-year congressional drumbeat on data handling: GOP House Energy and Commerce members pressed Apple and Alphabet on smartphone data back in 2018, and bipartisan House investigators demanded internal emails from Google, Amazon, Facebook, and Apple in their 2019 antitrust probe. What distinguishes this inquiry is its target: not what platforms collect, but the real-time-bidding pipeline itself, where any company joining an auction can read location, browsing history, and demographics without ever placing a winning bid.
The national-security framing — foreign clients accessing American user data through auctions — gives lawmakers a lever the earlier probes lacked, and it lands in an environment where regulators have since moved from questions to remedies, with the DOJ seeking to force Google to divest its ad exchange and share real-time bidding data.
First-order effects
- Google, AT&T, and the other six auctioneers must reconstruct three years of client records identifying which foreign entities touched bidstream data — an audit most ad-tech intermediaries have never been asked to perform.
Second-order effects
- If any named foreign buyer is deemed sensitive, publishers and advertisers using these exchanges will face pressure to demand visibility into who participates in their own auctions, threatening the opacity that intermediaries monetize.
Third-order effects
- Treating bidstream access as a national-security exposure points toward access controls or licensing on real-time bidding — a structural constraint layered on top of the competition remedies regulators are already pursuing against Google's ad stack.
The trend: Congressional oversight of adtech is escalating from data-collection questions toward treating real-time bidding itself as a regulated chokepoint, with national-security concerns accelerating the shift.