Ethics, Law, Privacy and Communication Governance

Introduction

Advertising and integrated marketing communication (IMC) influence what people notice, believe, feel and do. Because communication can affect purchasing decisions, reputation, social attitudes and access to information, it is not merely a creative activity. It is also a governed activity. Brand managers must work within legal requirements, professional standards, platform rules and broader ethical expectations.

Law establishes minimum enforceable standards. Ethics asks whether conduct is fair, honest and socially responsible even where the law is silent. Governance converts these expectations into decision rights, procedures, controls, records and accountability. A responsible communication programme therefore requires more than checking whether an advertisement is technically legal. It requires the organisation to ask whether the communication is truthful, understandable, respectful, appropriately targeted, privacy-preserving and consistent with the brand’s responsibilities.

Rules differ by country. Consumer-protection, privacy, copyright, advertising and broadcasting authorities may use different terminology and enforcement methods. This chapter presents internationally relevant principles, but campaigns must always be reviewed against the law of every market in which they appear.

Learning objectives

By the end of this chapter, you should be able to:

1. Distinguish legal compliance, ethical responsibility and communication governance.
2. Evaluate advertising claims, disclosures and evidence.
3. Apply principles concerning intellectual property, consumer protection and privacy.
4. Design responsible approaches to children, influencers, stereotypes and sustainability claims.
5. Assess brand-safety risks and the responsible use of artificial intelligence.
6. Recommend practical controls for approving and monitoring integrated campaigns.

1. The governance architecture of marketing communication

A useful governance architecture has four layers:

The layers overlap but are not interchangeable. An advertisement may comply with a narrow legal rule and still be misleading in context. Conversely, an ethically desirable action may require investment beyond the minimum legal standard, such as providing accessible formats or reducing unnecessary data collection.

The principal stakeholders are consumers, children and vulnerable groups, employees, creators, media owners, regulators, communities, shareholders and the natural environment. A brand manager’s responsibility is therefore broader than protecting the advertiser from complaints. It includes protecting public trust and reducing foreseeable harm.

A practical decision test

Before approval, ask:

• Is the central impression true and capable of substantiation?
• Would a reasonable audience understand the commercial purpose and material conditions?
• Is the audience able to evaluate the message, or is it especially vulnerable?
• Are personal data collected, inferred, shared or retained proportionately?
• Does the execution use another party’s work, identity or reputation lawfully?
• Could the message cause avoidable social, psychological, economic or environmental harm?
• Can the organisation explain, evidence and audit its decision later?

2. Truthful claims and consumer protection

2.1 Claims and overall impression

A claim is any express or implied representation about a product, service, price, performance, origin, availability, safety or social effect. The assessment normally concerns the advertisement’s overall impression, not only isolated words. Images, colour, comparisons, demonstrations, headlines, disclaimers and the context of presentation can all create claims.

Claims commonly fall into four categories:

• Objective claims: verifiable statements such as “contains 20% recycled material” or “reduces processing time by 30%.”
• Comparative claims: statements comparing a product with a named or identifiable competitor or with a market category.
• Puffery: broad, subjective expressions such as “a delicious experience,” which audiences are unlikely to interpret as precise factual claims.
• Implied claims: meanings suggested through imagery, omission or association, such as showing a product producing a result that it cannot normally achieve.

The more specific, measurable or consequential a claim is, the stronger the evidence required. Evidence should exist before publication, not be created after a complaint. It should be reliable, current, relevant to the advertised version of the product and based on an appropriate method.

2.2 Material information and disclosures

A disclosure is material when its absence could affect a consumer’s decision or understanding. Examples include automatic renewal, significant delivery costs, eligibility restrictions, sponsorship, affiliate relationships, limited stock, trial-to-paid conversion and conditions attached to a “free” offer.

A disclosure should be:

1. Prominent: placed where the claim is made, rather than hidden on a remote page.
2. Clear: written in ordinary language and, where needed, presented in the audience’s language.
3. Timely: available before the consumer commits.
4. Understandable: readable on the device and appropriate to the audience.
5. Complete: not contradicted by the headline or visual emphasis.

A disclaimer cannot normally cure a headline that creates a fundamentally false impression. Small print is not a substitute for truthful advertising.

2.3 Pricing, promotions and comparisons

Promotional communication must make the basis of a saving clear. A previous price should be genuine rather than an inflated reference price. “Up to” claims should reflect a meaningful proportion of outcomes, not merely the best exceptional result. Comparative advertising should use like-for-like measures, identify the basis and date of comparison and avoid denigrating competitors without evidence.

3. Intellectual property and rights clearance

Creative work is governed by several distinct rights. Copyright may protect text, photographs, music, video, illustrations, software and original design. Trade marks protect distinctive signs. Moral rights may protect attribution or the integrity of a creator’s work, depending on jurisdiction. A person’s name, image, voice or likeness may also be protected by privacy, publicity or personality rights.

A brand does not own a work merely because it paid a freelancer to create it. Ownership and permitted uses depend on the contract and applicable law. A licence should identify:

• the work and versions covered;
• media, territories and duration;
• paid, owned and earned uses;
• editing and adaptation rights;
• exclusivity, if any;
• talent, music and model releases;
• approval and takedown obligations; and
• warranties, indemnities and record-keeping responsibilities.

Common risks include using a photograph found through a search engine, sampling music without a licence, reproducing a competitor’s logo, using user-generated content without permission, or training and generating content with protected materials in ways that violate rights or contractual restrictions. “It was publicly available” does not mean “it was free to use.”

A rights-clearance log should link each asset to its creator, licence, permitted use, expiry date and approval. When a campaign is adapted for another market, the clearance must be checked again because rights and moral-rights rules can vary.

4. Privacy, consent and responsible data use

Personal data include information relating to an identified or identifiable person. They may be explicit, such as an email address, or inferred, such as an interest profile, location pattern or predicted purchasing intention. Cookies, device identifiers, loyalty records, customer-service transcripts and biometric information can all raise privacy concerns.

Privacy governance should address the full data lifecycle:

1. Purpose: define why data are needed.
2. Notice: explain collection, use, sharing, retention and rights.
3. Choice and consent: obtain valid permission where required and avoid coercive or confusing interfaces.
4. Minimisation: collect only what is reasonably necessary.
5. Security: restrict access and protect data against loss or misuse.
6. Retention: delete or anonymise data when the purpose ends.
7. Rights: support access, correction, deletion, objection or portability where applicable.
8. Accountability: document decisions, suppliers, assessments and incidents.

Consent should be informed, specific, freely given and revocable where the legal framework requires consent. Silence, pre-ticked boxes or a bundled “accept everything” choice may not constitute valid consent. A transaction should not normally be made conditional on unrelated marketing permission unless the arrangement is justified and lawful.

Privacy notices should be understandable at the point of collection. They should not conceal important processing in dense legal language. Personalisation also requires care: a message can be factually accurate yet unsettling if it reveals an inference that the consumer did not expect the brand to possess.

Data governance in IMC

Campaign teams should maintain a data map showing source, purpose, lawful basis, system, supplier, retention period and access rights. Suppliers such as agencies, analytics firms, customer-data platforms and media platforms should be assessed through contracts and due diligence. Cross-border transfers may require additional safeguards.

A privacy impact assessment is especially appropriate when processing is large-scale, systematic, sensitive, targeted at vulnerable people or involves profiling and automated decisions. The assessment should identify benefits, risks, mitigations and residual risk—not merely provide a compliance form.

5. Children and vulnerable audiences

Children may have limited ability to distinguish persuasion from entertainment, particularly in games, social video, virtual worlds and influencer content. They may also lack financial independence and a mature understanding of data practices. Campaigns directed at children therefore require stronger safeguards concerning content, data collection, commercial recognition, behavioural targeting, age assurance and parental involvement.

Responsible practice includes avoiding pressure to buy, exploitation of peer approval, unsafe demonstrations, excessive product placement and requests to persuade parents. Products unsuitable for children should not be promoted through child-directed creative or targeting. Age gates alone are not a universal solution; their effectiveness depends on design and context.

Other vulnerable audiences may include people experiencing financial difficulty, illness, bereavement, addiction, disability, low literacy or limited digital access. Vulnerability is contextual rather than a permanent label. Targeting methods should not exploit a person’s hardship or inability to understand an offer.

6. Influencer, affiliate and native marketing

Influencer communication becomes advertising when a commercial relationship, free product, commission, employment relationship or other material connection affects the message. Audiences should be able to recognise that relationship before or while encountering the endorsement.

Effective disclosure is conspicuous, unambiguous and close to the endorsement. Terms such as “Ad,” “Sponsored” or an equally clear local-language label are generally stronger than vague terms such as “collab” or a list of brand tags. Disclosure must work in the actual format: video, livestream, audio, story, caption and translated version.

Brands remain responsible for reasonable supervision of sponsored communication. They should:

• select creators whose conduct and audience fit the brand;
• provide accurate talking points without scripting false personal experience;
• prohibit unsupported claims;
• require visible disclosures;
• monitor posts and comments where appropriate;
• define correction and takedown procedures; and
• preserve evidence of briefing, approval and monitoring.

Native advertising and advertorial content create a similar risk because the commercial message resembles editorial material. The distinction should be clear without requiring unusual effort from the audience.

7. Stereotypes, inclusion and representation

Advertising both reflects and shapes social expectations. Stereotyping can restrict perceived roles, reinforce prejudice or exclude people from a brand’s symbolic community. Harm may arise through gender, race, ethnicity, disability, age, religion, body type, sexuality, class or nationality representations.

Inclusive communication is not achieved by token presence alone. It requires examining who speaks, who is shown as competent or authoritative, whose family or lifestyle is treated as normal, and whether humour depends on humiliation. Accessibility also matters: captions, alt text, readable contrast, audio description and plain language can widen participation.

A pre-publication representation review should consider the script, casting, camera treatment, language, editing, media placement and likely interpretation by different communities. It should involve relevant expertise rather than asking a single representative employee to approve all cultural questions.

8. Sustainability and social-impact claims

Environmental and social claims are particularly vulnerable to exaggeration because consumers cannot easily verify supply chains or long-term outcomes. Terms such as “green,” “eco-friendly,” “clean,” “ethical,” “carbon neutral” and “sustainable” may communicate broad impressions rather than narrow technical facts.

A responsible claim should:

• define the subject and boundary of the claim;
• identify the evidence, method and comparison baseline;
• distinguish current performance from future ambition;
• disclose material qualifications;
• avoid implying that a partial improvement eliminates total impact; and
• remain accurate throughout the campaign period.

For example, “packaging contains 30% recycled plastic by mass” is more assessable than “planet-friendly packaging.” A carbon claim should explain whether it concerns reduction, removal, offsetting, a product, an event or the organisation as a whole. Certification symbols must be genuine, relevant and not presented in a way that suggests official endorsement when none exists.

Social-impact claims similarly require evidence. A donation claim should state the amount or mechanism, beneficiary, time period and material conditions. Brands should not convert ordinary legal compliance into an exaggerated ethical achievement.

9. Brand safety and media responsibility

Brand safety concerns the risk that a brand appears beside content or practices inconsistent with its values, legal obligations or stakeholder expectations. Risks include hate speech, extremist content, misinformation, graphic violence, unsafe products, fraudulent publishers and harmful user-generated content.

Brand safety is not identical to brand suitability. A placement may be technically safe but unsuitable for a particular brand, audience or campaign objective. Overly broad blocking can also remove legitimate journalism or marginalise communities. Controls should therefore be proportionate and context-sensitive.

A brand-safety programme may include:

• a written risk taxonomy and exclusion list;
• approved inventory and publisher standards;
• contextual and audience controls;
• verification and fraud detection;
• human escalation for ambiguous content;
• crisis and takedown procedures; and
• post-campaign placement audits.

Responsibility extends beyond the visible advertisement. Buying media that funds harmful misinformation, deceptive publishers or unlawful data practices may conflict with the brand’s governance commitments.

10. Responsible use of artificial intelligence

AI can generate copy, images, video, audience segments, translations, recommendations and synthetic voices. It can improve speed and accessibility, but it can also reproduce bias, fabricate facts, infringe rights, expose confidential data and obscure accountability.

The central governance principle is that using AI does not transfer responsibility to the software provider. The advertiser and agency remain accountable for the output and its effects.

A responsible AI control framework includes:

1. Purpose and risk classification: identify whether the use affects vulnerable audiences, high-impact decisions, identity, safety or reputation.
2. Approved tools and data: prohibit confidential or personal data in unapproved systems; check supplier terms and training uses.
3. Human review: verify factual claims, cultural appropriateness, rights, accessibility and disclosure.
4. Provenance and records: retain prompts, source materials, model or tool version, approvals and final assets where proportionate.
5. Testing: evaluate bias, hallucination, privacy leakage, adversarial misuse and performance across relevant groups.
6. Transparency: disclose synthetic or materially altered content where audiences could otherwise be misled or where law or platform policy requires it.
7. Remedy: provide correction, complaint and takedown routes.

AI-generated testimonials or synthetic influencers should not suggest real personal experience unless that experience genuinely exists. Facial or voice likenesses require appropriate permission. Automated targeting should not use sensitive attributes or proxies in ways that unlawfully discriminate or exploit vulnerability.

11. An integrated campaign approval process

Governance is most effective when built into the workflow rather than added immediately before launch. A practical process is:

Brief: state objectives, audience, markets, claims, data uses, suppliers and foreseeable harms.

Risk screening: classify claim, privacy, rights, audience, representation, sustainability, AI and media risks.

Evidence and design: collect substantiation, permissions, disclosures, accessibility materials and alternative executions.

Review: obtain creative, legal, privacy, procurement, security and subject-matter review according to risk.

Approval: record the accountable decision-maker, conditions, expiry dates and unresolved risks.

Launch and monitoring: monitor complaints, comments, placements, performance anomalies, data incidents and creator compliance.

Correction and learning: correct promptly, withdraw when necessary, notify relevant parties and update the control system.

A useful risk register records the risk, affected stakeholder, likelihood, severity, existing controls, owner, residual risk and decision. Risk scoring is a prioritisation aid, not a substitute for judgment. A low numerical score does not make an unlawful act acceptable.

Illustrative case: GreenNest refill campaign

Background

GreenNest, a fictional household-cleaning brand, launches a social and retail campaign for refill pouches. The headline says “Clean your home with zero waste.” The product pouch uses 40% recycled plastic, and customers can return empty pouches at selected stores. Influencers receive free products and post videos describing the packaging as “fully sustainable.” The campaign uses a customer list to create lookalike audiences and retarget visitors who viewed the product page.

Problem

The campaign combines several risks. “Zero waste” suggests that the product creates no waste, although the pouch remains disposable. The influencer statements are not consistently disclosed. The return programme is geographically limited and is not prominent in the headline. The customer list may have been collected for order fulfilment rather than advertising. Retargeting may also require consent or another lawful basis depending on the jurisdiction and technology used.

Analysis

The central environmental claim is broader than the evidence. The brand should separate the verifiable attribute—such as recycled content—from the overall environmental impression. The return scheme needs clear conditions: participating locations, eligible packaging, dates and what happens after collection. Influencers need clear sponsorship labels and must not use unsupported personal or absolute claims.

The data team should confirm the original notice, permission, lawful basis, suppression requirements, supplier arrangements, retention and cross-device matching practices. The brand should assess whether children or vulnerable consumers are likely to be targeted and whether the lookalike model uses sensitive or proxy data.

Approach and solution

GreenNest replaces the headline with “Refill format with 40% recycled plastic in the pouch,” subject to evidence and jurisdictional wording. A secondary statement explains the return programme and its limitations. The campaign supplies accessible terms and a link to evidence. Influencer contracts require visible disclosures, accurate talking points, monitoring and correction. The data team documents the audience-building purpose, removes ineligible records, applies consent and opt-out controls, and limits retention. The media agency adds publisher and placement safeguards.

Outcome

The revised campaign makes a narrower claim, improves consumer understanding and reduces greenwashing, endorsement and privacy risk. It may initially appear less dramatic, but it creates a more defensible and credible basis for long-term brand trust.

Learning points

1. A positive attribute does not prove a broad environmental conclusion.
2. Disclosures must match the medium and appear near the relevant message.
3. Data collected for one purpose cannot automatically be reused for another.
4. Governance improves creative quality by clarifying what can be claimed credibly.

Challenges and limitations

No governance system eliminates risk. Laws may be unclear, inconsistent across markets or slower than technology. Platform enforcement can be opaque. Consumers interpret messages differently, and even carefully tested creative may cause unexpected offence. Excessive review can reduce speed and discourage useful experimentation, while inadequate review creates avoidable harm.

Organisations should therefore use proportionality: apply more scrutiny to high-impact claims, sensitive data, vulnerable audiences and irreversible or widely distributed content. They should also avoid treating compliance as a one-time approval. Monitoring, complaint analysis, audits and post-campaign evaluation are essential because risks change after launch.

Best-practice checklist

• Keep evidence for every material objective claim.
• Write disclosures for real screens, formats and audiences.
• Maintain asset, talent, music and likeness rights records.
• Map data flows and minimise collection and retention.
• Obtain meaningful consent where required and honour withdrawal.
• Apply enhanced safeguards to children and vulnerable audiences.
• Contract, brief and monitor influencers and agencies.
• Use precise, bounded sustainability language.
• Define brand-safety standards before media buying.
• Review AI outputs for truth, bias, privacy, rights and provenance.
• Assign owners, record decisions and provide correction routes.

Chapter Summary

Ethical and lawful IMC depends on truthful claims, meaningful disclosures, substantiated evidence and respect for consumer autonomy. Intellectual property and personality rights require deliberate clearance rather than assumptions about public availability. Privacy governance covers purpose, notice, consent, minimisation, security, retention and accountability across the data lifecycle. Children and vulnerable audiences require enhanced protection. Influencer and native advertising must be recognisable as commercial communication. Sustainability claims should be specific, bounded and supported by credible evidence. Inclusive representation, brand-safe media placement and responsible AI use are strategic responsibilities as well as compliance matters. An effective governance system embeds risk assessment, approval, monitoring, correction and learning into the campaign workflow.

Key Terms

Advertising claim: An express or implied representation about a product, service or organisation.

Brand safety: Controls that reduce harmful or inconsistent media-placement environments.

Comparative advertising: Communication comparing a product with a competitor or reference category.

Consent: A voluntary, informed and sufficiently specific indication of agreement to processing or communication.

Copyright: Legal protection for qualifying original creative works.

Disclosure: Information presented to clarify material conditions or a commercial relationship.

Greenwashing: Misleading communication that exaggerates or misrepresents environmental performance.

Implied claim: A meaning created indirectly through context, imagery, omission or association.

Influencer marketing: Promotion delivered through a person whose audience or reputation affects consumer interpretation.

Intellectual property: Legal rights protecting creations, signs, inventions and related interests.

Material information: Information likely to affect a consumer’s decision or understanding.

Native advertising: Paid content designed to resemble surrounding editorial or platform content.

Personal data: Information relating to an identified or identifiable person.

Puffery: Broad subjective praise not normally understood as a precise factual claim.

Retargeting: Advertising directed at people based on prior interaction with a brand or digital property.

Sustainability claim: A representation about environmental or social performance.

Trade mark: A protected sign distinguishing goods or services.

Vulnerability: A condition or context that limits a person’s ability to understand, resist or recover from persuasion or harm.

Governance: Structures and processes assigning authority, controls, accountability and review.

Review Questions

Short Answer Questions

1. Distinguish law, ethics and organisational governance in marketing communication.
2. What makes a disclosure clear and effective?
3. Identify four stages in the personal-data lifecycle that require governance.
4. Why is “publicly available” content not automatically free to use?
5. State two safeguards for influencer marketing.

Long Answer Questions

1. Explain how a brand manager should substantiate and communicate a comparative product claim.
2. Discuss the principal privacy risks in personalised digital advertising and propose controls.
3. Explain why children and vulnerable audiences require stronger communication safeguards.
4. Evaluate the relationship between sustainability claims, evidence and greenwashing.
5. Describe an integrated campaign approval process that incorporates legal, ethical and brand-safety review.

Analytical / Application Questions

1. A retailer advertises “free delivery” but reveals a compulsory service charge only at checkout. Analyse the consumer-protection and disclosure issues and recommend a revised execution.
2. An AI tool produces an image showing a celebrity using a product, although no permission was obtained. Identify the rights, ethical and governance risks and propose an appropriate response.
3. A creator receives commission for recommending a financial product to young followers but labels the post only “partner.” Assess the disclosure, audience and vulnerability risks and design a compliant alternative.

Multiple Choice Questions with Answers

Question 1

Which statement best describes a material disclosure?

A. Information that is likely to affect a consumer’s decision or understanding

B. Information included only in an internal creative brief

C. A decorative slogan added to improve visual balance

D. A statement that is never shown to the audience

Correct Answer: A. Information that is likely to affect a consumer’s decision or understanding

Question 2

Why is evidence for an objective advertising claim normally required before publication?

A. To make the advertisement longer

B. To support the claim if its truthfulness is challenged

C. To ensure every advertisement uses technical language

D. To replace the need for consumer disclosures

Correct Answer: B. To support the claim if its truthfulness is challenged

Question 3

Which practice presents an intellectual-property risk?

A. Using an asset within the exact scope of a valid licence

B. Creating an original illustration in-house

C. Assuming an online photograph is free to use because it appears in search results

D. Recording the expiry date of a music licence

Correct Answer: C. Assuming an online photograph is free to use because it appears in search results

Question 4

Which principle concerns collecting only data reasonably necessary for a stated purpose?

A. Data minimisation

B. Puffery

C. Comparative advertising

D. Media neutrality

Correct Answer: A. Data minimisation

Question 5

What is generally the clearest influencer disclosure?

A. A vague list of brand-related hashtags

B. The word “Ad” placed clearly near the endorsement

C. A disclosure hidden on an unrelated webpage

D. No disclosure when the creator received free products

Correct Answer: B. The word “Ad” placed clearly near the endorsement

Question 6

Why can the phrase “zero waste” be problematic for a disposable refill pouch?

A. It is always a comparative claim

B. It may create a broad environmental impression unsupported by the product’s actual life cycle

C. It cannot appear in digital media

D. It is automatically protected by copyright

Correct Answer: B. It may create a broad environmental impression unsupported by the product’s actual life cycle

Question 7

Which statement about AI-generated advertising is most accurate?

A. The software provider always assumes all advertiser responsibility

B. Human review is unnecessary if the output looks realistic

C. The advertiser remains responsible for truth, rights, privacy and potential harm

D. AI output can never require disclosure

Correct Answer: C. The advertiser remains responsible for truth, rights, privacy and potential harm

Question 8

What is the principal purpose of a brand-safety programme?

A. To guarantee that every advertisement receives the same audience size

B. To reduce the risk of placement beside harmful or inconsistent content

C. To eliminate all controversial journalism from media

D. To replace creative testing

Correct Answer: B. To reduce the risk of placement beside harmful or inconsistent content

Question 9

Which approach is most appropriate when targeting children?

A. Use pressure based on peer approval

B. Hide the commercial purpose inside entertainment

C. Apply stronger safeguards concerning persuasion, data and age suitability

D. Assume an age gate always solves every risk

Correct Answer: C. Apply stronger safeguards concerning persuasion, data and age suitability

Question 10

A campaign uses customer emails to create advertising audiences. What should the brand first confirm?

A. Whether the emails have attractive formatting

B. Whether the original collection and notice permit the proposed use

C. Whether the campaign has no creative concept

D. Whether the audience can be renamed

Correct Answer: B. Whether the original collection and notice permit the proposed use