A fast-evolving space built on personalisation — a lot of the data behind it is captured indirectly, and advertising's own consent practices are part of the risk, not separate from it.
Personalisation is central to the product, and much of the data behind it is captured indirectly — behavioural signals rather than anything a user consciously declared — which needs its own purpose-disclosure discipline.
When audiences skew toward children, the same profiling practices carry the DPDPA's strictest obligations — Verifiable Parental Consent applies exactly as it does in EdTech.
Advertising sits inside this industry's core data practices, not alongside it — and dark patterns in ad-consent flows are a real, current risk here, not a hypothetical one.
Advertising partnerships and data-sharing arrangements are frequently under-contracted.
User-generated content platforms face unique data-minimisation and moderation-data questions.
Cross-platform identity resolution (web, app, connected TV) fragments consent state.
30 minutes to talk through your specific data footprint — no obligation.
Book a Consultation