Compliance Glossary

A method of comparing two versions of an ad or landing page to determine which performs better.

When an ad platform permanently or temporarily shuts down an advertiser's account due to repeated or severe policy violations.

A platform's assessment of an advertiser's overall compliance track record, affecting ad review speed and account privileges.

The process of regaining access to or restoring functionality of a restricted or disabled ad account through platform support channels.

A temporary restriction on an ad account, usually pending review or requiring the advertiser to fix policy issues.

The organizational unit within an ad platform that holds campaigns, billing information, and permissions for running advertisements.

The practice of gradually increasing ad spend on new accounts to build trust with platform algorithms and avoid triggering fraud detection.

The real-time bidding process where platforms determine which ad to show to a specific user based on bid, quality, and relevance.

The written text in an advertisement, including headlines, descriptions, and calls to action.

The visual and multimedia elements of an advertisement, including images, videos, carousels, and interactive formats.

When a platform rejects an ad for violating its advertising policies, preventing it from being shown to users.

The decline in ad performance that occurs when an audience sees the same ad too many times.

Fraudulent activity that manipulates ad delivery, clicks, or conversions to generate illegitimate revenue or inflate metrics.

A setting that limits the maximum number of times a specific user can see an ad within a defined time period.

A public transparency tool provided by platforms that allows anyone to view active and past ads run by advertisers.

The specific location or format where an ad appears within a platform's ecosystem (e.g., Feed, Stories, Reels, Search).

A metric estimating the additional number of users who would remember seeing an ad within two days of exposure.

The act of a platform declining to run an ad because it violates advertising policies or guidelines.

Meta's system that rates ad quality across three dimensions: quality ranking, engagement rate ranking, and conversion rate ranking.

The ability to set specific dates, times, and days of the week when ads are eligible to be shown.

A mid-level organizational unit within ad campaigns that defines targeting, budget, schedule, and placement settings.

An IAB standard that publishers use to declare which companies are authorized to sell their ad inventory, combating unauthorized reselling.

The process by which ad platforms verify the identity and legitimacy of advertisers before allowing them to run ads.

A marketing arrangement where third parties promote products for a commission, subject to specific platform rules and FTC disclosure requirements.

Mechanisms that restrict ad targeting or content access based on user age, required for age-restricted products and services.

Advertising content created or modified using artificial intelligence tools, subject to emerging platform disclosure requirements and regulations.

Advertising for alcoholic beverages, subject to strict platform policies, age-gating requirements, and jurisdiction-specific regulations.

The automated decision-making system platforms use to determine which ads to show to which users and at what price.

Granting specific accounts, domains, or creatives pre-approved status that bypasses certain platform restrictions or reviews.

Apple's iOS framework requiring apps to get explicit user permission before tracking their activity across other apps and websites.

The formal process of requesting a platform to reconsider an ad disapproval, account restriction, or policy enforcement decision.

The process of determining which ads and touchpoints contributed to a conversion, used for optimizing ad spend allocation.

The practice of removing specific user segments from ad targeting to improve relevance or comply with policy requirements.

Platform tools providing demographic, behavioral, and interest data about an advertiser's audience segments.

A platform's extended ad delivery network that places ads on third-party apps and websites beyond the core platform.

The process of defining which users will see an ad based on demographics, interests, behaviors, and other criteria.

Platform features that automatically adjust campaigns based on predefined performance or compliance conditions.

Comparison images showing results before and after using a product or service, heavily restricted on most ad platforms.

Targeting ads based on users' past online behavior, browsing history, and interaction patterns.

Measures taken to ensure ads do not appear alongside harmful, offensive, or inappropriate content that could damage brand reputation.

Content created by influencers or publishers that features or is influenced by a brand, requiring proper disclosure and platform tagging.

A platform's centralized hub for managing ad accounts, pages, users, and business assets with permissions and security controls.

The process of confirming a business's legal identity, address, and legitimacy on advertising platforms.

A prompt in an ad encouraging the viewer to take a specific action, such as 'Shop Now,' 'Learn More,' or 'Sign Up.'

The top-level organizational unit in ad platforms that defines the advertising objective, budget, and overarching strategy.

The US federal law governing commercial email messages, requiring sender identification, opt-out mechanisms, and truthful headers.

Advertising for cannabis products, restricted or prohibited on most platforms due to federal/international illegality despite state-level legalization.

Conversions API — a server-side tracking method that sends conversion data directly from the advertiser's server to the ad platform.

Canada's Anti-Spam Legislation — a Canadian law governing commercial electronic messages, requiring express or implied consent.

The California Consumer Privacy Act — a US state law giving California residents rights over their personal data, including the right to opt out of data sale.

Advertising directed at or likely to reach children, subject to strict regulations including COPPA, GDPR-K, and platform-specific protections.

Special privacy protections for minors' data, enforced through COPPA, GDPR, and increasingly strict platform policies.

The documented evidence supporting advertising claims, required before claims are made in advertising by both the FTC and platform policies.

The practice of generating fake or invalid clicks on ads to drain an advertiser's budget or inflate publisher revenue.

The percentage of users who click on an ad after seeing it, calculated as clicks divided by impressions.

Sensationalized or misleading ad content designed to attract clicks through curiosity or deception, prohibited by most platforms.

The deceptive practice of showing different content to platform reviewers than what actual users see, a serious policy violation.

A platform's rules governing acceptable content and behavior for all users, which also apply to advertising content.

Advertising that compares a product or service with competitors, subject to truthfulness requirements and platform-specific rules.

A systematic review of advertising practices to ensure adherence to platform policies, regulations, and industry standards.

A structured set of policies, procedures, and controls that an organization implements to ensure advertising practices meet regulatory and platform requirements.

Ongoing surveillance of advertising activities to detect and address policy violations, regulatory breaches, and compliance risks in real time.

A user's explicit or implied permission for data collection, processing, or advertising targeting, required by privacy regulations.

A tool that helps websites and apps collect, manage, and store user consent for cookies and data processing.

An individual who produces digital content for platforms, often partnering with brands for sponsored content and advertising.

The process by which platforms review and enforce rules on user-generated and advertising content.

Targeting ads based on the content of the page or app being viewed, rather than user behavior or profile data.

A desired action completed by a user after interacting with an ad, such as a purchase, sign-up, or download.

A measurement methodology that uses test/control groups to determine the true incremental impact of advertising on conversions.

The percentage of users who complete a desired action after clicking an ad, calculated as conversions divided by clicks.

The time period after an ad click or view during which a conversion is attributed to that ad interaction.

A small text file stored in a user's browser by websites, used for tracking, personalization, and ad targeting.

The Children's Online Privacy Protection Act — a US federal law that restricts the collection of personal data from children under 13.

The average cost to acquire one conversion, calculated by dividing total ad spend by the number of conversions.

The amount an advertiser pays for each click on their ad in a pay-per-click advertising model.

The cost per thousand impressions, a standard pricing model for display and video advertising.

Running advertising campaigns across multiple countries, requiring compliance with each jurisdiction's unique advertising regulations.

Advertising for cryptocurrency products and services, subject to rapidly evolving platform restrictions and financial regulations.

An audience segment created from an advertiser's own customer data (email lists, website visitors, app users) for targeted advertising.

Deceptive user interface designs that manipulate users into unintended actions, such as hidden opt-outs or confusing consent flows.

The entity that determines the purposes and means of processing personal data, bearing primary responsibility under GDPR.

A GDPR principle requiring that only personal data necessary for the specified purpose is collected and processed.

A legally binding contract between a data controller and data processor that governs how personal data is handled.

An entity that processes personal data on behalf of a data controller, bound by a data processing agreement.

A formal assessment required by GDPR for data processing activities that pose a high risk to individuals' privacy rights.

A designated role responsible for overseeing an organization's data protection strategy and GDPR compliance.

A formal request from an individual to access, correct, or delete their personal data held by an organization.

Scheduling ads to run only during specific times of day or days of the week to optimize performance or comply with regulations.

Interface designs that manipulate users into making unintended choices, synonymous with dark patterns and increasingly regulated.

The webpage URL where users are directed after clicking an ad, subject to platform policies on matching, functionality, and content.

An EU regulation targeting large platform 'gatekeepers' with rules on fair competition, data portability, and advertising transparency.

An EU regulation imposing transparency, content moderation, and advertising rules on online platforms and search engines.

A statement in or accompanying an ad that limits liability, clarifies claims, or provides legally required disclosures.

Technology that automatically generates and tests multiple ad variations by combining different creative elements.

Sending commercial messages via email, subject to regulations like CAN-SPAM, CASL, and GDPR consent requirements.

A clear statement revealing a material connection between an endorser and a brand, required by FTC guidelines and platform policies.

The percentage of users who interact with an ad through likes, comments, shares, or other engagement actions relative to impressions or reach.

Google's privacy-safe conversion measurement that uses hashed first-party data to improve conversion tracking accuracy.

An EU directive governing electronic communications privacy, including rules on cookies, tracking, and direct marketing.

Advertising for financial products and services, subject to platform restrictions, licensing requirements, and regulatory disclosures.

Data collected directly by an organization from its own customers and users through direct interactions.

The average number of times a unique user sees a specific ad within a given time period.

The Federal Trade Commission — the primary US federal agency enforcing truth-in-advertising laws and consumer protection regulations.

Advertising for gambling, betting, and games of chance, subject to strict platform restrictions and varying national regulations.

A designation under the EU Digital Markets Act for large platforms that control key digital services and must comply with additional obligations.

The General Data Protection Regulation — the EU's comprehensive data protection law governing how personal data is collected, processed, and stored.

Targeting ads to users based on their geographic location, including country, region, city, or radius targeting.

Advertising claims about health benefits of products, heavily regulated by the FTC, FDA, and all major ad platforms.

Artificially generating fake ad views to inflate metrics or defraud advertisers in CPM-based campaigns.

The number of times an ad is displayed on a screen, regardless of whether it was actually seen or clicked.

Advertising claims about potential earnings or income, heavily regulated and frequently rejected by ad platforms.

Marketing through partnerships with social media influencers who promote brands to their followers, requiring proper disclosure.

Non-human or fraudulent ad traffic that doesn't represent genuine user engagement, classified as general (GIVT) or sophisticated (SIVT).

Verification processes used to confirm the identity and legitimacy of advertisers, increasingly required by platforms and regulations.

Platform rules governing the destination pages that ads link to, including requirements for functionality, content, and user experience.

The process of collecting potential customer information through ads, subject to data collection and consent requirements.

A legal basis under GDPR for processing personal data when an organization has a justified business reason that doesn't override the individual's rights.

A third-party verification required by Google and other platforms for advertisers in healthcare, pharmacy, and addiction treatment categories.

Brazil's General Data Protection Law — a comprehensive privacy regulation modeled on GDPR governing personal data processing.

A targeting audience created by platforms that matches characteristics of an advertiser's existing customers to find similar potential customers.

AI-powered systems used by ad platforms for automated ad delivery optimization, content moderation, and policy enforcement.

Human review of ads by platform policy specialists, triggered by automated flags, appeals, or random sampling.

Meta's suite of AI-powered ad automation tools that optimize targeting, creative, and placement with minimal advertiser input.

Advertising statements that deceive or are likely to deceive consumers, prohibited by both regulations and platform policies.

Paid content designed to match the look, feel, and function of the surrounding non-paid content on a platform.

A keyword that prevents ads from showing when specific search terms are used, important for brand safety and compliance.

A consent model requiring users to actively agree before their data is collected or they receive marketing communications.

A model where data collection or marketing occurs by default, and users must actively choose to stop it.

A browser or device-level signal indicating a user's preference not to be tracked, such as Global Privacy Control (GPC).

A commercial arrangement between a brand and a creator that must be disclosed through platform tools and proper labeling.

Google's AI-driven campaign type that serves ads across all Google surfaces using automated targeting, bidding, and creative.

Advertising for prescription drugs, OTC medications, and medical devices, subject to FDA regulations and strict platform restrictions.

Canada's federal privacy law governing how private-sector organizations collect, use, and disclose personal information in commercial activities.

A piece of code installed on a website that tracks user actions and sends data back to an ad platform for measurement and optimization.

The continuous monitoring of platform policy changes, regulator actions, and enforcement decisions, surfaced as alerts for the compliance, legal, and brand teams accountable for them.

A formal warning recorded against an ad account for policy violations, where accumulation leads to increasingly severe penalties.

Any breach of a platform's advertising policies, ranging from minor formatting issues to serious prohibited content violations.

Ads related to elections, political candidates, or social issues, subject to verification requirements and special transparency rules.

An approach that integrates privacy considerations into the design and development of systems, products, and business practices from the outset.

A legally required document disclosing how an organization collects, uses, shares, and protects personal data.

Google's initiative to replace third-party cookies with privacy-preserving APIs for advertising targeting and measurement.

Automated buying and selling of digital advertising through real-time auctions and algorithmic decision-making.

A buying method that uses programmatic technology to execute direct deals with fixed pricing and guaranteed inventory.

Content categories that are completely banned from advertising on a platform, with no exceptions or appeal options.

Google Ads' 1-10 rating of keyword, ad, and landing page quality that affects ad ranking and cost-per-click.

The total number of unique users who saw an ad at least once during a campaign period.

An auction-based system where ad impressions are bought and sold in milliseconds as a webpage or app loads.

A controlled environment where businesses can test innovative products or services under relaxed regulatory requirements.

A platform-assigned quality metric that rates how well an ad resonates with its target audience, affecting delivery and costs.

Showing ads to users who have previously interacted with your website, app, or content. Also known as retargeting.

An ad format where multiple headlines, descriptions, and images are provided and the platform algorithmically combines them for optimal performance.

An audience segment that platforms limit or prohibit advertisers from targeting due to age, sensitivity, or regulatory requirements.

Ad content categories that are allowed on platforms but only with specific restrictions, certifications, or targeting limitations.

The practice of showing ads to users based on their previous interactions with a brand's digital properties.

The revenue generated for every dollar spent on advertising, calculated as revenue divided by ad spend.

Software Development Kit — code integrated into mobile apps for ad tracking, attribution, and in-app event measurement.

An advertiser operating in a regulated or restricted industry that faces additional platform requirements and review processes.

Personal data categories related to health, religion, politics, or sexuality that are restricted for ad targeting under GDPR and platform policies.

Tracking method where conversion data is sent from the advertiser's server rather than the user's browser, bypassing client-side restrictions.

An unofficial reduction in content or ad visibility by a platform without explicit notification to the account holder.

Marketing evidence that others have purchased, used, or endorsed a product, including reviews, ratings, and user counts.

TikTok's native ad format that lets brands boost existing organic posts from their own account or a creator's account.

Platform-designated ad categories (housing, employment, credit, politics) with restricted targeting to prevent discrimination.

EU-approved legal frameworks for transferring personal data from the EU to countries without adequate data protection levels.

The requirement to have evidence supporting advertising claims before making them, enforced by the FTC and platform policies.

The practice of evaluating and selecting the most efficient, transparent, and brand-safe paths to purchase ad inventory.

A statement from a customer or user about their experience with a product, subject to FTC guidelines and platform policies on authenticity.

Data collected by entities that have no direct relationship with the user, purchased or aggregated for advertising targeting.

Advertising for tobacco products, broadly prohibited across all major ad platforms and heavily regulated by law in most countries.

Unauthorized use of another company's trademark in advertising, which can result in ad rejection and legal action.

An IAB Europe standard that helps publishers, advertisers, and technology vendors comply with GDPR consent requirements for advertising.

Regular reports published by platforms detailing content moderation actions, government requests, and advertising enforcement statistics.

A security measure requiring two verification methods to access an account, increasingly required by platforms for ad account access.

Documentation proving when, how, and what a user consented to, essential for demonstrating GDPR and CCPA compliance.

Content created by users or customers that brands repurpose for advertising, requiring proper permissions and compliance review.

URL tags added to ad destination links that track the source, medium, campaign, and other attributes of incoming traffic.

Platform-specific requirements for video ad format, dimensions, duration, file size, and content standards.

A metric measuring whether an ad was actually visible to a user, based on industry standards for pixels-in-view and display duration.

Advertising for weight loss products and services, facing strict platform restrictions on claims, imagery, and targeting.

The practice of running ads through a creator's or influencer's account handle with their permission, commonly used in influencer marketing.

EU Digital Services Act designation for platforms with 45M+ monthly active EU users; subject to systemic-risk and transparency obligations.

EU Digital Services Act designation for search engines with 45M+ monthly active EU users; equivalent obligations to VLOPs.

Public European Commission database where VLOPs/VLOSEs publish every content moderation decision (Statement of Reasons) under Article 24(5) of the DSA.

Germany's Federal Office of Justice; the lead enforcement authority for content takedown obligations originally under NetzDG, now operating alongside the EU DSA framework.

Federal UAE authority regulating media licensing, including the influencer-licensing framework that replaced the National Media Council (NMC) after its dissolution in 2020.

France's 2023 Law No. 2023-451 — the world's first comprehensive influencer marketing law, mandating disclosure, banning certain product categories, and creating a registration regime.

France's 1991 law severely restricting alcohol advertising; effectively prohibits social media alcohol promotion targeted at French audiences.

Japan's October 2023 amendment to the Premiums and Representations Act prohibiting undisclosed advertising; enforced by the Consumer Affairs Agency (CAA).

A third-party entity that acts as the legal seller for transactions, assuming responsibility for tax remittance, PCI-DSS compliance, and consumer-protection obligations on behalf of the underlying business.

Under GDPR, a third-party service that processes personal data on behalf of a Data Processor; must be disclosed to the controller and bound by equivalent data protection obligations.

The 2020 CJEU ruling (Case C-311/18) invalidating the EU-US Privacy Shield and tightening Standard Contractual Clauses requirements for international data transfers.

EU Digital Services Act provision prohibiting profiling-based advertising to known minors and requiring age-appropriate platform design.

UK Information Commissioner's Office statutory code (effective 2021) setting 15 standards for online services likely to be accessed by children under 18.

US 2008 law requiring lead and phthalate testing on children's products, third-party certification, and tracking labels; enforced by the Consumer Product Safety Commission.

EU AI Act fine structure: up to €35M or 7% of global turnover for prohibited practices; up to €15M or 3% for other obligation breaches.

A passwordless authentication method where users receive a single-use sign-in link via email, eliminating password management and reducing credential-theft attack surface.

Meta Platforms, Inc. — the parent company operating Facebook, Instagram, Messenger, Threads, and WhatsApp, with a unified advertising and policy stack.

Short-form video platform owned by ByteDance, with distinct ad policies, community guidelines, and shop/commerce rules across regional markets.

Google's advertising platform spanning Search, Display, YouTube, Shopping, and Maps — governed by a unified policy framework with surface-specific addenda.

Microsoft-owned professional networking platform with B2B-focused advertising policies, lead-generation rules, and stricter member-content moderation.

Google-owned video platform governed by Community Guidelines (organic creators), Advertiser-Friendly Content Guidelines (monetization), and Google Ads policies.

Snap Inc.'s ephemeral-messaging and AR-camera platform with strict advertising rules around minors, restricted goods, and political content.

Visual discovery platform with detailed advertising standards covering healthcare, financial services, and creative content rules.

Microblogging platform rebranded from Twitter in 2023, with significantly revised advertising and content moderation policies under new ownership.

UK Office of Communications — the UK regulator for broadcasting, telecoms, postal services, and (under the Online Safety Act 2023) online platforms.

UK Financial Conduct Authority — regulator of financial services firms and financial promotions, including paid advertising of investments and cryptoassets.

France's data protection authority (Commission nationale de l'informatique et des libertés) — enforces GDPR and the French Data Protection Act.

UK Information Commissioner's Office — regulator for the UK GDPR, the Data Protection Act 2018, and PECR cookie/marketing rules.

France's audiovisual and digital communication regulator (Autorité de régulation de la communication audiovisuelle et numérique) — the French Digital Services Coordinator under the DSA.

Italy's communications regulator (Autorità per le Garanzie nelle Comunicazioni) — Italy's Digital Services Coordinator under the DSA.

Brazil's National Data Protection Authority — enforces the Lei Geral de Proteção de Dados (LGPD), Brazil's GDPR-equivalent privacy law.

Germany's 2017 Network Enforcement Act — first major national law imposing 24-hour takedown obligations on social platforms for illegal content, now operating alongside the EU DSA.

Mandatory record platforms must issue under DSA Article 17 for each content-moderation decision, explaining the specific rule, evidence, and remedies offered.