A publisher's real-time bidding stack broadcasts user pseudonymous IDs and URL context to dozens of bid requesters without intelligible notice of recipients or purposes. Which compliance concern is strongest?
Select an answer to reveal the explanation.
Short Explanation
If your ID is sprayed to a crowd of bidders before anyone explains who gets it or why, transparency already tripped. Speed of the auction does not erase purpose limitation or the need for a real legal basis. RTB still has to answer GDPR basics.
Full Explanation
Identifiers and browsing context that can single out a user are generally personal data even when pseudonymous. Large-scale RTB dissemination multiplies recipients and secondary uses, straining Arts. 5 and 6 and transparency duties about purposes and recipients. Controllers and joint participants must confront lawful basis, data minimisation, and clear information—millisecond auctions do not create a compliance exemption.