Ad Tech’s Infrastructure Was Always A Risk
Ad Tech’s Infrastructure Was Always A Risk
Publish Date: 2026-03-09 00:35:00
Source Domain: www.adexchanger.com
I’ve been saying for years that addressable advertising was a strategic mistake.
Not because targeting shouldn’t exist, but because building an ecosystem dependent on granular identity, location trails and behavioral signals was always going to create exposure we couldn’t fully control.
And if we’re being honest, the precision targeting story was oversold anyway. The industry sold a fantasy of surgical efficiency that independent research has continuously picked apart. Yet that narrative required massive data extraction to sustain itself.
The problem wasn’t advertising; it was the tech infrastructure we built to support it.
Now we’re seeing efforts by the US government to use that infrastructure for the exact type of surveillance digital advertising’s critics have long warned about. We should have seen this coming.
The warnings we dismissed
Credit should go to Johnny Ryan of the Irish Council for Civil Liberties and Open Markets Institute, who has been a longtime critic of surveillance advertising.
Ryan has called real-time bidding “the largest data breach ever recorded,” arguing that the bidstream exposes location and behavioral data to a long chain of companies that most users have never heard of. The point he was making was that when you widely broadcast personal data, you don’t get to tightly control where it ends up.
The Irish Council for Civil Liberties published research showing that RTB data could reveal the movements of military personnel. That revelation was a sober reminder that this isn’t just about shoe ads or conversion rates but structural exposure.
Online privacy advocate Max Schrems approached the issue from a different angle, but the underlying theme was similar. His work challenging EU-US data transfers focused on the reality that, once large pools of personal data exist, governments will try to access them. He has repeatedly argued that US surveillance law does not provide…
