Appendix L.

Abstract

4. However, currently each of these activities involves the gathering, remote processing, and (sometimes) transfer of large quantities of user data across publishers, advertisers, platforms and intermediaries in the digital advertising supply chain. This data is often personal data within the meaning of GDPR, which raises data protection and privacy issues.1 In particular, these data (including personal data) are sent to a potentially very large number of third