Rules and ethics
Part of What are the IAB UK retail media standards for measurement and transparency?
What are the IAB UK retail media standards for measurement and transparency?
The IAB UK retail media standards cover shared measurement definitions and transparency duties, with ISBA and UK GDPR setting the advertiser and legal layers.
What to take away
- IAB UK publishes retail media guidance that fixes shared definitions for formats, measurement and transparency, so buyers and sellers describe the same events in the same words.
- The guidance is voluntary. The Advertising Codes, enforced by the ASA, and UK GDPR, overseen by the ICO, are the parts with legal teeth.
- ISBA sits on the advertiser side and has published its own retail media framework covering data access, audit and trading terms.
- Measurement standards only help if you record the definitions you actually used, including the ones nobody could test.
- Any campaign that touches shopper data needs a lawful basis and a retention position agreed before launch.
Where the IAB UK standards sit
The Interactive Advertising Bureau is a trade association for digital advertising, and its UK arm writes guidance with its members. Retail media is one workstream among several. The material tends to cover three things: how formats are described, how campaigns are measured, and what transparency buyers should expect.
ISBA represents UK advertisers, and its retail media framework takes the buyer's view: what data a brand receives, what it may do with that data, and how performance is audited. The two documents are complements, not rivals. One sets vocabulary for the market; the other sets expectations for the contract.
| Body | Publishes | Force |
|---|---|---|
| IAB UK | Retail media definitions, measurement and transparency guidance | Voluntary, written with members |
| ISBA | Advertiser-side framework for data access, audit and trading | Voluntary, membership guidance |
| CAP and ASA | UK Advertising Codes, including rules on advert recognition | Enforced by the ASA |
| ICO | UK GDPR guidance on lawful basis, consent and individual rights | Legal duties under data protection law |
Measurement definitions come first
Comparability is the hard part. An impression can mean a banner served, a sponsored product rendered on screen, or a search slot won at auction. Three retailers can use the same word and mean three different events. The IAB UK approach asks both sides to declare definitions rather than settle on one number.
Apply that discipline before you compare anything, using the definitions work set out in retail media metrics from ad request to incremental sale. If a retailer will not state its counting rule, treat the number as unverified rather than estimate it.
Transparency and advert recognition
The UK Advertising Codes require marketing communications to be obviously identifiable as such. That duty sits with the advertiser and the publisher, not with any industry guidance. A sponsored product tile that looks like an organic listing fails the test, whatever the measurement standard says. CAP writes the codes and the ASA enforces them, with the texts listed on the Advertising codes page.
In practice, review the rendered placement on a phone and in the app, not in a media pack. Then confirm whose name appears as the advertiser on the page. Screenshots with dates survive a later dispute better than a promise. Keep them with the campaign record.
Data protection duties underneath
Where retail media measurement uses personal data, UK GDPR applies. That means a lawful basis, a retention period and a route for people to exercise their rights. The ICO's UK GDPR guidance sets out how to choose and document a basis.
In-store screens that sense who is nearby add another layer. Consent, signage and data minimisation need answers before installation, not after. Premises risk assessments are a separate duty.
Applying the standards to one campaign
Work through the sequence below, and use the advert recognition checks before a retail media booking to test what shoppers will see on the page.
- Write the definition of every metric before the campaign starts, and date the record.
- Name the lawful basis for each personal data field you receive.
- Agree in writing which party is controller and which is processor.
- Check how the sponsored placement renders on the live site and app.
- Record what could not be tested, and why, before you sign.
- Set a review date, and a stop rule if the definitions change mid-flight.
Common questions
Are the IAB UK retail media standards legally binding?
No. They are voluntary guidance written with members. The enforceable layers are the Advertising Codes, applied by the ASA, and data protection law, overseen by the ICO.
How do the IAB UK standards differ from the ISBA framework?
IAB UK material is written for the market as a whole and concentrates on shared definitions and measurement. ISBA's framework speaks for advertisers and concentrates on data access, audit rights and trading terms.
Do the standards cover in-store retail media screens?
The measurement principles can be applied to screens, and the transparency rules still expect an advert to look like one. Consent, sensing and signage fall under UK GDPR instead.
Who enforces retail media standards in the UK?
The ASA enforces the Advertising Codes on a case-by-case basis. The ICO enforces data protection law, and the CMA can act where competition or consumer law is engaged.