{"id":7515,"date":"2018-06-11T23:40:10","date_gmt":"2018-06-11T23:40:10","guid":{"rendered":"https:\/\/davidgerard.co.uk\/blockchain\/?p=7515"},"modified":"2018-07-12T20:37:54","modified_gmt":"2018-07-12T20:37:54","slug":"yougov-directs-gdpr-compliant-blockchain-gdpr-laundering-as-a-service","status":"publish","type":"post","link":"https:\/\/davidgerard.co.uk\/blockchain\/2018\/06\/11\/yougov-directs-gdpr-compliant-blockchain-gdpr-laundering-as-a-service\/","title":{"rendered":"YouGov Direct’s “GDPR-compliant” blockchain \u2014 GDPR-laundering as a service"},"content":{"rendered":"

\"\"<\/a><\/p>\n

 <\/p>\n

YouGov<\/a> is a British polling company. They’re known for reasonably-respected, statistically valid polls on political issues of the day. These function as advertising for the company’s bread-and-butter\u00a0\u2014 running commercial surveys for companies that collect responses from panels of online users, typically doing surveys from home.<\/p>\n

In February, YouGov announced<\/a> “a new digital advertising platform”: YouGov Direct<\/a> \u2014 which aims to overcome both ineffective ad targeting and consumers’ problems controlling the use of their data through harnessing … can you guess? … blockchain technology!<\/em> <\/a><\/p>\n

Through YouGov Direct, panellists will be able to choose which personal attributes to make available to third parties while remaining anonymous. For example, a user might decide to share information about favourite hobbies and withhold data related to health history. In exchange for sharing their data, users will earn additional rewards.<\/p><\/blockquote>\n

The really eye-catching claim is that YouGov Direct’s blockchain will be GDPR-compliant:<\/p>\n

YouGov Direct\u2019s transparent and verifiable record of transactions provides assurance that ads are reaching actual humans as opposed to bots and will support businesses in meeting the requirements of the forthcoming EU General Data Protection Regulation (GDPR).<\/p><\/blockquote>\n

Can the Blockchain provide GDPR laundering?<\/h3>\n

YouGov Direct is a pitch to advertisers. They will make panelist demographic data available to their customers\u00a0\u2014 the advertisers.<\/p>\n

In GRITBook (Greenbook Research Industry Trends Report), 2018 Q1-Q2,<\/a> YouGov co-founder and CEO Stephan Shakespeare<\/a> outlines the problems he’s pitching this as the solution to:<\/p>\n

Brands will be able to use high quality data for targeting\u00a0\u2014 no longer subject to whatever questionable data has been packaged up and distributed through Data Management Platforms (DMPs) for which the provenance cannot often be proved.<\/p><\/blockquote>\n

The GDPR is a laser-targeted nightmare for internet advertising companies who compile shadow profiles of consumers \u2014 but they do this because they’re desperate to find a way to make Internet ads work at all. Particularly as the big boys, Google and Facebook, will cope with the GDPR much better<\/a> than smaller companies will.<\/p>\n

A solution to this quandary \u2014 targeted demographic data, but, somehow, GDPR-laundered! \u2014 is a tantalising offer to a desperate industry. Even more so if the technology is magical, buzzwordy and ill-understood.<\/p>\n

How YouGov’s blockchain works<\/h3>\n

YouGov’s technical Medium post<\/a> is the closest we have to a white paper. It’s written entirely as hypotheticals, using “would” \u2014 none of this exists yet.<\/p>\n

Panelists get a “blockchain address,” with only YouGov knowing which panelist has which address.<\/p>\n

Advertisers run a campaign as a simple smart contract, constrained on desired user attributes and a time period. Every time a user views an ad, the smart contract gets a ping. A separate panelist consent grant is used for each campaign. There’s a complicated bit with sidechains for each advertising campaign.<\/p>\n

Payment will be to and from the public Ethereum blockchain \u2014 not using actual money.<\/p>\n

The process also blithely assumes “the immutability and transparency of distributed ledger technology” \u2014 if you buy something branded “blockchain,” you get all possible positive attributes for free!<\/p>\n

When a panelist leaves …<\/h3>\n

The obvious problem with this idea \u2014 the GDPR also applies to the panelists.<\/p>\n

YouGov can require that a panelist allows their data to be in YouGov’s blockchain-derived private database while they’re participating in the YouGov Direct network \u2014 but if they leave, they can demand their demographic data is removed. Completely.<\/em><\/p>\n

Even if YouGov’s blockchain is somewhat decentralised\u200a … the company administers it. What do they have in place to deal with the circumstance of a panelist wanting to GDPR their commercially-valuable personal information out<\/em> of the “immutable” blockchain?<\/p>\n

And that’s without going into the customer companies compiling shadow profiles on people, as they presently do. Will YouGov’s GDPR-laundering be as immune to data compilation as YouGov and their customers will need it to be?<\/p>\n

I’m at a loss as to how anything about this, as described, doesn’t lead in a few small ill-considered steps to Cambridge Analytica, but on the blockchain.<\/a><\/p>\n

GDPR is antimatter to blockchains<\/h3>\n

As well as writing this news blog, I consult on blockchain and cryptos. When people ask about GDPR and PII, I warn them: don’t put Personally Identifying Information (PII) into an append-only ledger, under any circumstances.<\/em><\/strong><\/p>\n

“Immutable” and “GDPR” don’t belong in the same system.<\/p>\n

You will<\/em> have to remove Personally Identifying Information at some point \u2014 putting it into an append-only ledger is only making a rod for your own back. Use a conventional database.<\/em><\/p>\n

Yes, but what about the people?<\/h3>\n

YouGov Direct have a lot of experienced people involved<\/a> … all of whom are from advertising and marketing, and zero of whom appear to have any blockchain expertise. There must be someone, but they don’t list them.<\/p>\n

Shakespeare managed, not one,<\/a> but two<\/a> entire lengthy interviews about YouGov Direct without revealing a single detail about how any of this works. Reading his descriptions of Blockchain, I’m not convinced he knows either.<\/p>\n

He did note in the second interview<\/a> that he was inspired by Imogen Heap’s approach to blockchain. Readers of chapter 12<\/a> of the book<\/a> will recall that Heap’s essay into the blockchain space achieved total sales of one hundred and thirty three dollars and twenty cents<\/a> …<\/p>\n

In GRITBook, Shakespeare did reveal one important detail about the nuts and bolts of YouGov Direct’s blockchain:<\/p>\n

We believe Blockchain will have an impact on the market research industry by enabling the ability to reduce the friction between brands and organizations that wish to engage with consumers with the appropriate controls and value exchange for the consumer participants through the use of smart contracts.<\/p><\/blockquote>\n

You heard the man \u2014 it’ll use … computer programs!<\/em><\/p>\n

I mean, at least they’re not running an ICO.<\/a><\/p>\n

YouGov Direct will be going live over the course of Financial Year 2019, starting this summer.<\/p>\n

Thanks to Cate Lapitalism<\/a> for the pointer.<\/em><\/p>\n

\"Become<\/a>

Your subscriptions keep this site going. Sign up today!<\/a><\/i><\/p><\/div>","protected":false},"excerpt":{"rendered":"

Polling company YouGov think that, with YouGov Direct, they can sell demographic data to advertisers in a suitably GDPR-laundered manner. Using … the blockchain!<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[74,491,702,700,701],"class_list":["post-7515","post","type-post","status-publish","format-standard","hentry","category-uncategorised","tag-blockchain","tag-gdpr","tag-stephan-shakespeare","tag-yougov","tag-yougov-direct"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/davidgerard.co.uk\/blockchain\/wp-json\/wp\/v2\/posts\/7515","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/davidgerard.co.uk\/blockchain\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/davidgerard.co.uk\/blockchain\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/davidgerard.co.uk\/blockchain\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/davidgerard.co.uk\/blockchain\/wp-json\/wp\/v2\/comments?post=7515"}],"version-history":[{"count":50,"href":"https:\/\/davidgerard.co.uk\/blockchain\/wp-json\/wp\/v2\/posts\/7515\/revisions"}],"predecessor-version":[{"id":7791,"href":"https:\/\/davidgerard.co.uk\/blockchain\/wp-json\/wp\/v2\/posts\/7515\/revisions\/7791"}],"wp:attachment":[{"href":"https:\/\/davidgerard.co.uk\/blockchain\/wp-json\/wp\/v2\/media?parent=7515"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/davidgerard.co.uk\/blockchain\/wp-json\/wp\/v2\/categories?post=7515"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/davidgerard.co.uk\/blockchain\/wp-json\/wp\/v2\/tags?post=7515"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}