Ethics, Privacy, Regulation and Responsible Media

Introduction

Media planning and buying is often presented as a performance discipline: identify audiences, select channels, negotiate inventory, deliver reach, and evaluate outcomes. Yet every media decision also distributes attention, collects information, influences behaviour, and allocates economic opportunity. Consequently, media professionals are not merely buyers of advertising space. They are stewards of audience trust, personal data, public discourse, brand reputation, and social impact.

Ethical and responsible media planning asks questions that cannot be answered by cost-per-thousand impressions alone. Was the audience reached through lawful and meaningful consent? Were vulnerable people targeted or exploited? Did an algorithm exclude groups from opportunities? Was political communication transparent? Were children protected? Did an influencer disclose a commercial relationship? Was copyrighted material used lawfully? Could an apparently effective campaign spread misinformation or contribute unnecessarily to environmental harm?

The applicable rules vary by jurisdiction. Privacy laws, advertising standards, election laws, consumer-protection rules, intellectual-property statutes, and platform policies may impose different requirements. This chapter therefore presents widely applicable principles and refers to representative frameworks such as the European Union General Data Protection Regulation (GDPR), the ePrivacy framework, the United Kingdom Data Protection Act 2018 and advertising codes, the United States Children’s Online Privacy Protection Act (COPPA), the Federal Trade Commission’s endorsement guidance, and international professional codes. These examples are educational rather than legal advice. Campaign teams must obtain current, jurisdiction-specific advice before execution.

Learning Objectives

By the end of this chapter, students should be able to:

1. Explain the ethical foundations of consent, privacy, fairness, accountability, and public responsibility in media planning.
2. Distinguish lawful processing from ethically defensible data use.
3. Assess risks arising from surveillance advertising, automated decision-making, discrimination, and political communication.
4. Apply responsible practices to child-directed media, influencer marketing, intellectual property, misinformation, and sustainability.
5. Design governance controls, documentation, and escalation processes for media campaigns.
6. Evaluate a media plan using professional codes, regulatory principles, and stakeholder analysis.

1. Ethics and Regulation: Related but Distinct

Ethics concerns what ought to be done. It involves principles such as respect for persons, honesty, fairness, autonomy, non-maleficence, and social responsibility. Law establishes enforceable minimum standards. Professional codes provide sector expectations, often exceeding legal minimums. Governance converts principles into decision rights, processes, controls, records, and accountability.

A legal decision is not necessarily an ethical decision. For example, a data practice may satisfy a formal notice requirement while remaining difficult for ordinary users to understand. Conversely, a professional code may recommend greater transparency than legislation requires. Responsible media management therefore uses a layered test:

A useful ethical decision sequence is: identify affected stakeholders; describe the intended benefit; identify foreseeable harms; test legality and consent; consider less intrusive alternatives; document the decision; monitor outcomes; and provide remedy where harm occurs.

2. Consent, Privacy and Data Stewardship

2.1 Personal data in media planning

Personal data includes information relating to an identified or identifiable person. It may include names and contact details, device identifiers, online identifiers, location, browsing behaviour, purchase history, inferred interests, or an advertising identifier. Sensitive or special-category data generally receives stronger protection; examples can include health, biometric, political, religious, or ethnic information, depending on the legal system.

Media systems commonly process data at several points:

• audience research and panel measurement;
• customer-list onboarding and matching;
• website pixels and software development kits;
• contextual and behavioural targeting;
• frequency management and attribution;
• conversion measurement and retargeting;
• campaign optimisation through automated bidding.

The fact that a platform can technically obtain data does not establish that a planner may ethically or legally use it.

2.2 Consent and lawful processing

Consent should be informed, specific, freely given, and expressed through a clear affirmative action where required. It should not be hidden in dense text, bundled unnecessarily with unrelated services, or made practically unavoidable. People should understand who is collecting information, for what purposes, what categories of data are involved, how long data will be retained, and how consent can be withdrawn.

Privacy regimes may also recognise other legal bases, such as contractual necessity, legal obligation, vital interests, public task, or legitimate interests. A legal basis is not a universal permission. Legitimate-interest processing, for example, normally requires identification of a legitimate purpose, necessity, and a balancing assessment against individuals’ rights and expectations.

Consent management should distinguish purposes. Consent for personalised advertising is not automatically consent for sale to unrelated parties, political profiling, or indefinite retention. A robust record includes the wording shown, date and time, source, purpose, version of the notice, and withdrawal status.

2.3 Data minimisation and privacy by design

Data minimisation means collecting and using only what is reasonably necessary for a defined purpose. Purpose limitation means not repurposing data in ways incompatible with the original expectation. Storage limitation requires retention only for as long as justified. Privacy by design and by default requires privacy safeguards to be built into systems rather than added after launch.

Practical controls include contextual targeting instead of identity-based targeting; aggregation and statistical reporting; pseudonymisation; encryption; access controls; deletion schedules; vendor due diligence; and contractual restrictions on secondary use. Anonymisation must be assessed carefully: removing names does not necessarily prevent re-identification when datasets can be combined.

2.4 Individual rights and organisational accountability

Depending on the jurisdiction, individuals may have rights to access, correct, delete, restrict, object to processing, or receive portable data. Some laws provide rights concerning significant automated decisions. Organisations may need a data-protection officer, records of processing, breach-notification procedures, and a data-protection impact assessment for high-risk processing.

A data-protection impact assessment (DPIA) is particularly relevant when campaigns involve large-scale monitoring, sensitive data, systematic profiling, children, biometric information, or innovative technologies. It should describe processing, necessity, proportionality, risks, safeguards, residual risk, and approval authority.

3. Surveillance Advertising and the Changing Media System

The traditional media plan generally purchased audiences through publishers. Digital advertising introduced extensive observation across sites, applications, devices, and data brokers. Real-time bidding can involve rapid transmission of bid requests containing audience or device signals to numerous participants. This creates risks of opaque data flows, security failures, excessive profiling, and use beyond audience expectations.

The decline of third-party cookies does not eliminate surveillance. First-party data, device graphs, identity solutions, connected television, location signals, retail-media data, and machine-learning inference may continue to create detailed profiles. A responsible planner should ask:

1. What information is collected?
2. Who receives it at each stage?
3. Is the purpose reasonably expected by the individual?
4. Can the campaign meet its objective with less intrusive data?
5. Can the organisation explain and control the supply chain?

Contextual targeting selects media based on the content or environment rather than a persistent profile. It is not automatically risk-free: content classification can be inaccurate, and sensitive environments require care. Nevertheless, it can reduce dependence on cross-site tracking and may better align targeting with user expectations.

4. Fairness, Discrimination and Algorithmic Accountability

Targeting and automated bidding can reproduce or intensify social inequality. A campaign may exclude people from housing, employment, credit, education, insurance, or public-service information because an algorithm uses proxies for age, gender, ethnicity, disability, location, income, or inferred behaviour. Discrimination may be direct, indirect, or statistical. A system can produce unequal outcomes even when prohibited variables are not explicitly included.

Media planners should distinguish audience relevance from audience exclusion. Reaching a group because a message is useful to it may be legitimate; preventing a protected group from seeing an opportunity may be harmful or unlawful. Sensitive-category targeting and proxy targeting require heightened scrutiny.

A practical fairness review asks:

• What benefit or opportunity is being distributed?
• Which groups are included, excluded, or systematically under-represented?
• Are exclusions necessary and proportionate?
• Do optimisation objectives reward harmful outcomes?
• Are training data and measurement data representative?
• Can affected people challenge or remedy the decision?

Controls include prohibited-segment lists, human approval for high-impact campaigns, representative testing, outcome monitoring by relevant demographic groups where lawful and appropriate, explainable settings, and suspension thresholds. Privacy and fairness can conflict: collecting demographic information may help detect disparate outcomes but create additional privacy risk. Governance must balance both concerns and use controlled, justified measurement.

5. Political Advertising and Public Communication

Political advertising presents special risks because it can affect elections, public policy, and democratic legitimacy. Rules differ substantially across countries and may regulate spending limits, sponsor identification, blackout periods, disclosure libraries, foreign funding, issue advertising, and targeting. Platforms may impose additional restrictions or prohibit certain categories.

Responsible political media requires clear sponsor labels, accurate claims, accessible records of spend and targeting criteria, separation of campaign and client funds, and heightened review of synthetic media. Microtargeting can make contradictory claims invisible to the wider public and can exploit sensitive information. A prudent policy may prohibit targeting based on political opinion, health, religion, ethnicity, or other sensitive traits and limit targeting to broad geographic or contextual categories.

The distinction between political advertising and ordinary commercial communication can be difficult. A corporate campaign about a public controversy may influence political attitudes even when it does not support a candidate. Legal review should therefore consider content, sponsor, timing, audience, call to action, and local definitions of election or issue advertising.

6. Children and Other Vulnerable Audiences

Children may have limited ability to recognise persuasion, understand data practices, or evaluate commercial claims. Regulation may restrict behavioural advertising, profiling, direct marketing, collection of children’s data, or advertising for products such as alcohol, gambling, and certain foods. Age thresholds and parental-consent rules vary by jurisdiction.

Responsible practice includes age-appropriate design, reliable age-assurance methods where proportionate, avoidance of manipulative interfaces, clear separation of content and advertising, limits on frequency and behavioural targeting, and careful selection of creators and placements. “Family-friendly” content is not necessarily child-directed, and a disclaimer cannot cure an inherently manipulative design.

Vulnerable adults may also require protection, particularly in relation to debt, gambling, health, addiction, crisis, or exploitative employment. Media plans should assess vulnerability as a contextual condition rather than relying only on demographic labels.

7. Influencer Marketing and Native Advertising

Influencer marketing can be persuasive because audiences often experience creators as trusted peers. That trust creates a disclosure obligation. A material connection—payment, free products, commission, employment, or another benefit—should be disclosed clearly, prominently, and in language the audience understands. Disclosures should not be hidden after “more,” buried among hashtags, or contradicted by claims of independence.

Advertisers and agencies should provide written briefs, require truthful substantiation, prohibit undisclosed endorsements, review posts before publication where appropriate, monitor live content, and retain evidence of approvals. Responsibility cannot be transferred entirely to the creator. The advertiser may remain accountable for foreseeable non-compliance.

Native advertising should be distinguishable from editorial or user-generated content. Labels such as “advertisement,” “sponsored,” or equivalent plain language are generally stronger than ambiguous terms. Disclosure must be appropriate to the medium, including video, audio, livestreams, and short-form content.

8. Intellectual Property and Rights Clearance

Media buying does not automatically confer ownership of creative assets. Copyright may protect text, images, music, video, software, and audiovisual combinations. Trademarks protect distinctive signs, while publicity or personality rights may protect a person’s name, image, voice, or likeness. Licences must cover the intended territory, duration, media, audience, paid amplification, edits, and archival use.

A rights-clearance workflow should identify every asset, owner, licence, restriction, expiry date, and approval. Stock-media licences may restrict use in political campaigns, merchandise, sensitive contexts, or automated transformations. Music licensed for organic social content may not be licensed for paid advertising. Generative AI creates additional questions concerning training data, output similarity, performer consent, voice cloning, and contractual warranties.

The safest operational rule is simple: do not assume that online availability means permission to copy, adapt, or commercially distribute. Maintain a rights register and establish takedown and replacement procedures.

9. Misinformation, Disinformation and Brand Safety

Misinformation is false or misleading information shared without necessarily intending harm. Disinformation is false or misleading information deliberately created or distributed to deceive or cause harm. Advertising can support harmful information ecosystems by funding unreliable publishers, amplifying sensational claims, or using synthetic media without disclosure.

Brand safety is narrower than brand suitability. Brand safety seeks to avoid clearly harmful or illegal environments; brand suitability reflects the advertiser’s values, risk tolerance, and context. Keyword blocking alone is inadequate because words can appear in legitimate reporting, satire, or educational content, while harmful meaning may occur without blocked words.

Controls include vetted inclusion and exclusion lists, independent verification, supply-path transparency, human review of sensitive contexts, misinformation escalation procedures, and post-campaign audits. Planners should not automatically withdraw from all controversial journalism: doing so may reduce support for legitimate public-interest media and create biased information environments. The objective is proportionate risk management, not avoidance of complexity.

10. Sustainability and the Environmental Footprint of Media

Media has environmental impacts through data centres, production, devices, travel, printing, ad-tech auctions, and wasted impressions. Sustainability therefore concerns both the creative asset and the delivery system. Repeated bids, low-quality inventory, excessive frequency, large file sizes, and serving ads to non-human or unreachable traffic can increase emissions without increasing value.

A responsible plan can reduce waste by consolidating supply paths, using efficient formats, limiting unnecessary bid requests, applying frequency controls, selecting credible measurement partners, reducing production travel, and avoiding impressions unlikely to be viewable or relevant. Sustainability claims must be substantiated and should state boundaries: for example, whether a reported footprint covers media delivery only or also production and travel.

Carbon calculations are estimates dependent on system boundaries and data quality. They should not be presented with false precision. Offset claims require additional scrutiny and should not substitute for direct reduction.

11. Governance Framework for Responsible Media

A campaign governance framework should assign responsibility before media is purchased. Key roles may include the client owner, planner, buyer, privacy specialist, legal adviser, data-protection officer, brand-safety lead, platform representative, and independent auditor.

A practical governance cycle is:

1. Classify the campaign: commercial, political, public service, health, financial, child-directed, or otherwise high risk.
2. Map stakeholders and data flows: document audiences, vendors, platforms, data categories, transfers, and retention.
3. Assess risk: consider privacy, fairness, deception, safety, intellectual property, environmental impact, and reputational harm.
4. Choose controls: apply consent, minimisation, targeting restrictions, verification, disclosure, rights clearance, and sustainability measures.
5. Approve and document: record assumptions, evidence, responsible decision-makers, and residual risk.
6. Monitor: inspect delivery, placements, complaints, frequency, demographic outcomes, disclosures, and incidents.
7. Remediate: pause inventory, correct claims, notify relevant parties, delete data, compensate where appropriate, and update controls.

A risk register can use qualitative ratings such as low, medium, and high, but ratings must be supported by rationale. High-impact decisions should require senior approval and a documented exit or suspension condition. Governance is effective only when people can actually stop a campaign without commercial retaliation.

Applied Case: The “Healthy Futures” Campaign

Background

Healthy Futures, a fictional public-health organisation, plans a six-week campaign encouraging adults to attend a preventive health screening. It proposes using customer lists, location-based mobile targeting, short-form influencer videos, and automated optimisation. The agency also intends to use a stock photograph of a family and a popular song in the video.

Problem

The initial plan raises several concerns. Health-related audience inference may constitute sensitive profiling. Location data may expose visits to clinics. The influencer has not planned a clear sponsorship disclosure. The song licence covers organic social use but not paid advertising. The optimisation system is likely to under-deliver to older people because younger audiences generate cheaper clicks. Finally, the campaign’s claim that screening “prevents serious illness” is broader than the available evidence.

Analysis

The team conducts a DPIA and stakeholder review. It concludes that individual health profiles are unnecessary. It replaces behavioural targeting with contextual placements around reliable health information and broad geographic targeting. The team prohibits location signals near clinics and uses aggregated reach measurement. A privacy notice explains the purpose, suppliers, retention period, and opt-out process.

A fairness review identifies a risk that click-based optimisation will favour younger users. The campaign therefore uses an outcome measure based on completed appointment information supplied in aggregated form by the health service, with strict access controls. Separate monitoring checks reach across age groups without creating individual health profiles.

The influencer contract requires a prominent sponsorship disclosure, evidence-based wording, correction procedures, and approval of the final script. The agency purchases a suitable music licence, obtains a commercial image licence, and verifies that the image does not imply a medical outcome unsupported by evidence. Legal and clinical reviewers approve the claim: “Screening can help identify some conditions earlier. Check whether it is recommended for you.”

Outcome

The campaign reaches its intended geographic audience with fewer data transfers and avoids sensitive individual targeting. Older-audience reach improves after the optimisation rule is changed. The organisation retains evidence of consent and licences, publishes a plain-language privacy explanation, and pauses two placements that appear beside unreliable medical claims.

Learning Points

The case demonstrates that responsible media is not necessarily less effective. Replacing intrusive targeting with contextual relevance, improving measurement quality, and reviewing claims can protect people while strengthening credibility. It also shows that privacy, fairness, influencer disclosure, intellectual property, misinformation, and clinical accuracy must be managed together rather than as isolated compliance tasks.

Contemporary Developments and Professional Implications

Artificial intelligence is increasingly used for audience modelling, creative generation, bid optimisation, fraud detection, brand-safety classification, and synthetic media. Human accountability remains necessary because automated systems can infer sensitive traits, reproduce bias, hallucinate claims, or make decisions that cannot be adequately explained. Agencies should maintain model inventories, document data sources, test outputs, restrict high-risk uses, disclose synthetic content where appropriate, and provide human escalation.

Privacy-enhancing technologies—including clean rooms, aggregation, on-device processing, differential privacy, and secure multi-party computation—may reduce exposure, but they are not automatic ethical solutions. Their effectiveness depends on implementation, governance, and whether the underlying purpose is justified.

Employability in media management increasingly requires hybrid competence. A planner should understand audience strategy and negotiation while also reading data-processing agreements, questioning platform claims, interpreting regulatory guidance, documenting decisions, and communicating risk to clients. Ethical competence is therefore a commercial capability: it reduces legal exposure, prevents waste, protects reputation, and supports durable audience relationships.

Best-Practice Checklist

Before launch, the media team should be able to answer “yes” to the following questions:

• Is the campaign purpose clear, legitimate, and proportionate?
• Is the audience informed in understandable language?
• Is consent valid where required, and can it be withdrawn?
• Has unnecessary personal data been removed?
• Have sensitive targeting and discriminatory exclusions been prohibited or justified?
• Are children and vulnerable audiences protected?
• Are political sponsors, influencer relationships, and native advertising clearly disclosed?
• Are all creative, music, image, likeness, and software rights documented?
• Are claims accurate and supported by evidence?
• Are placement, misinformation, fraud, and supply-chain risks monitored?
• Are environmental impacts measured within stated boundaries?
• Is there a named owner who can pause or correct the campaign?

Challenges and Limitations

Responsible media decisions are difficult because laws differ, platforms provide incomplete information, measurement can itself require personal data, and commercial pressure rewards speed. Ethical concepts such as fairness and public interest can be contested. Excessive blocking may reduce reach to legitimate journalism, while insufficient control may fund harmful content. Anonymisation can fail, consent interfaces can become performative, and audits may examine documentation without revealing real-world outcomes.

The appropriate response is not to seek a perfect risk-free campaign. It is to use proportionality, transparency, evidence, independent challenge, continuous monitoring, and accessible remedy. Organisations should be prepared to revise a plan when new evidence shows that actual effects differ from intended effects.

Chapter Summary

Ethical and responsible media planning extends beyond legal compliance. It requires respect for autonomy, privacy, fairness, truthfulness, safety, intellectual property, democratic integrity, and environmental responsibility. Consent must be meaningful; data must be minimised and governed; surveillance systems must be scrutinised; and algorithmic targeting must be assessed for discriminatory outcomes. Political advertising requires transparency and special care because it affects democratic processes. Children and vulnerable audiences require stronger safeguards. Influencer and native advertising must be clearly identified. Copyright, music, image, likeness, and AI-related rights must be documented. Misinformation and brand-safety controls should be contextual and proportionate, while sustainability requires reduction of waste and honest reporting of environmental boundaries.

Effective governance connects these principles to campaign practice through classification, data-flow mapping, risk assessment, approval, monitoring, documentation, and remediation. Responsible media is therefore both an ethical obligation and a strategic capability that protects trust, improves quality, and supports sustainable professional performance.

Key Terms

Consent: A clear, informed, and freely given agreement to a specified processing activity.

Data minimisation: Collecting and using no more personal data than is necessary for a defined purpose.

Purpose limitation: Restricting data use to the purposes communicated and justified at collection.

Personal data: Information relating to an identified or identifiable person.

Sensitive data: Data categories receiving heightened protection, such as health, biometric, political, or religious information.

Surveillance advertising: Advertising based on extensive observation, tracking, profiling, or inference about individuals.

Contextual targeting: Selecting media according to content or environment rather than an individual’s persistent profile.

Profiling: Automated or structured analysis of personal information to evaluate or predict characteristics or behaviour.

Algorithmic discrimination: Unequal or harmful treatment produced by automated systems or the data used by them.

Political advertising: Paid communication intended to influence political attitudes, elections, policy, or public debate.

Vulnerable audience: People whose circumstances or capacities may reduce their ability to recognise, resist, or remedy persuasion.

Influencer disclosure: A clear statement that a creator has a material commercial relationship with an advertiser.

Native advertising: Paid content designed to resemble the surrounding editorial or platform content.

Intellectual property: Legal rights protecting creations, brands, inventions, designs, and related interests.

Brand safety: Measures intended to prevent advertising from appearing in clearly harmful, illegal, or unsuitable environments.

Misinformation: False or misleading information not necessarily distributed with an intent to deceive.

Disinformation: False or misleading information deliberately created or distributed to deceive or cause harm.

Privacy by design: Integrating privacy safeguards into systems, products, and processes from the outset.

Data-protection impact assessment: A structured assessment of high-risk processing, its harms, and proposed safeguards.

Supply-path transparency: Visibility into the intermediaries, fees, data flows, and inventory sources involved in digital advertising.

Review Questions

Short Answer Questions

1. Why is legal compliance not always sufficient for ethical media planning?
2. State four characteristics of meaningful consent.
3. What is the difference between behavioural and contextual targeting?
4. Why must influencer advertising disclose material relationships?
5. Identify three controls that can reduce intellectual-property risk.

Long Answer Questions

1. Explain how privacy by design can be applied throughout the media-planning and buying process.
2. Discuss the risks and governance requirements of algorithmic targeting.
3. Analyse the special ethical and regulatory concerns associated with political advertising.
4. Explain how a media organisation can manage misinformation without unnecessarily excluding legitimate journalism.
5. Discuss the relationship between sustainability, media waste, supply-path management, and campaign effectiveness.

Analytical / Application Questions

1. A retailer wants to combine purchase history, mobile location, and inferred health interests to target advertisements for a sensitive product. Develop a risk assessment and recommend a less intrusive alternative.
2. An automated campaign delivers employment advertisements mainly to younger users because they generate cheaper applications. Identify the fairness risks and design a monitoring and remediation plan.
3. An influencer posts a paid health testimonial without disclosure, using an unlicensed song and an unsupported claim. Prepare an incident-response plan covering immediate action, stakeholder communication, rights clearance, and future governance.

Multiple Choice Questions with Answers

Question 1

Which practice best reflects data minimisation?

A. Collecting every available identifier for possible future use

B. Collecting only the data necessary for a defined campaign purpose

C. Keeping personal data indefinitely after a campaign ends

D. Sharing raw audience files with all supply-chain partners

Correct Answer: B. Collecting only the data necessary for a defined campaign purpose

Question 2

Which feature is most essential to meaningful consent?

A. It is hidden in a long terms-and-conditions document

B. It is bundled with unrelated purposes

C. It is informed, specific, and freely given

D. It cannot be withdrawn after collection

Correct Answer: C. It is informed, specific, and freely given

Question 3

What does contextual targeting primarily use?

A. The content or environment in which an advertisement appears

B. A person’s inferred medical condition

C. A permanent cross-device identity graph

D. An individual’s political preferences

Correct Answer: A. The content or environment in which an advertisement appears

Question 4

Why can algorithmic media optimisation create discrimination?

A. Algorithms always treat every group identically

B. Optimisation data and proxies can produce unequal outcomes

C. Automated bidding eliminates all audience selection

D. Discrimination occurs only when a protected variable is explicitly entered

Correct Answer: B. Optimisation data and proxies can produce unequal outcomes

Question 5

Which practice is most appropriate for political advertising?

A. Concealing the sponsor to increase persuasion

B. Using sensitive political profiles without review

C. Providing clear sponsor identification and relevant disclosures

D. Making contradictory claims to different hidden audiences

Correct Answer: C. Providing clear sponsor identification and relevant disclosures

Question 6

What should an influencer do when receiving payment for a product endorsement?

A. Avoid mentioning the relationship

B. Use a clear and prominent sponsorship disclosure

C. Disclose it only in a private message

D. Describe the endorsement as completely independent

Correct Answer: B. Use a clear and prominent sponsorship disclosure

Question 7

Which statement about online creative assets is correct?

A. Anything publicly viewable is automatically free to use commercially

B. A licence must cover the intended commercial use and media

C. Buying media space transfers copyright ownership

D. Music licences never need territory or duration limits

Correct Answer: B. A licence must cover the intended commercial use and media

Question 8

What is disinformation?

A. Accurate information presented in a short format

B. False information deliberately distributed to deceive or cause harm

C. Any controversial editorial opinion

D. Advertising placed beside news content

Correct Answer: B. False information deliberately distributed to deceive or cause harm

Question 9

Which action most directly reduces unnecessary digital-media waste?

A. Increasing bid requests across every available intermediary

B. Removing all frequency controls

C. Consolidating supply paths and limiting low-value impressions

D. Using the largest possible creative file for every placement

Correct Answer: C. Consolidating supply paths and limiting low-value impressions

Question 10

What is the main purpose of a data-protection impact assessment?

A. To guarantee that a campaign will generate a profit

B. To identify high-risk processing, potential harms, and safeguards

C. To replace all professional and legal review

D. To calculate the number of impressions purchased

Correct Answer: B. To identify high-risk processing, potential harms, and safeguards