IAB Tech Lab finalizes Agentic RTB Framework to curb data leakage

Finalizing this framework signals a shift toward in-auction processing to mitigate the privacy risks of broadcasting user data to hundreds of bidders. By moving logic into secure containers, the industry can maintain targeting and attribution while reducing the 178 trillion annual data broadcasts estimated by the ICCL. This technical evolution directly addresses regulatory pressure from the FTC and European authorities regarding the unauthorized retention of bidstream data by losing bidders. As identifier-based buying remains central following the retirement of most Privacy Sandbox technologies, the focus now turns to how quickly DSPs like The Trade Desk and Google adopt these containerized standards to replace legacy broadcast methods.

The IAB Tech Lab has been building toward containerized auction processing for over a year, with the Agentic RTB Framework emerging from earlier work on bidstream data governance. In March 2025, IAB Tech Lab published its OpenRTB 3.0 specification updates that introduced structured metadata fields designed to reduce unnecessary data exposure in bid requests, laying groundwork for the containerized model now finalized. The framework's architecture aligns with parallel efforts by major SSPs: PubMatic announced in Q2 2025 that its Decision Fabric platform had processed over 40 billion daily bid requests with selective data routing to reduce downstream leakage, demonstrating commercial demand for the kind of in-auction processing the new standard codifies.

Regulatory pressure on bidstream data practices has intensified alongside these technical developments. The Irish Council for Civil Liberties's 2022 complaint to data protection authorities estimated that 178 trillion data broadcasts occur annually through real-time bidding, and ICCL's follow-up report in September 2024 documented that at least 4,698 companies had received personal data through bidstream leaks without valid legal basis. The FTC has separately signaled enforcement interest: in November 2024, the agency issued a 6(b) study order to six major ad tech companies including Google and Amazon, requesting information on how consumer data flows through programmatic supply chains. That study's findings are expected to inform whether the commission pursues rulemaking specific to bidstream data retention, which would make the Agentic RTB Framework's containerized approach a compliance mechanism rather than merely a best practice.

On the technical side, The Trade Desk and Google represent the largest DSP-side adoption question for the framework. The Trade Desk's Kokai platform, which reached general availability in late 2024, already uses proprietary machine learning models to evaluate bid requests before responding, suggesting its infrastructure could integrate containerized processing with relatively low engineering lift. Amazon's Signal IQ product, which provides privacy-safe audience signals to advertisers, expanded to include contextual and commerce graph signals in Q1 2025, positioning Amazon as both a demand-side participant and a data provider within the new framework's containerized environment. The convergence of these platform capabilities with the finalized standard will determine whether the industry can reduce bidstream data exposure at scale before regulators mandate structural changes.