Consent in digital advertising was designed for a world where humans make decisions about data. A brand's data controller approves an audience segment for activation. A consent management platform records the legal basis for processing. A data clean room mediates the sharing between a brand and a platform under terms a human on each side agreed. Every link in that chain assumes a person with legal accountability made a data decision. When an agent negotiates on a buyer's behalf, the chain does not break. It needs to be redesigned to stay intact.
TL;DR. Under GDPR and equivalent frameworks, data processing requires a lawful basis, and the controller who established that basis must be a legal person: a natural person or a legal entity, not a software agent. An agent can act on data-sharing decisions a human controller already made and recorded, but it cannot establish new lawful bases at the point of negotiation. This means first-party audience data cannot be made available for agent negotiation without prior explicit authorisation from a human data controller defining exactly what the agent may offer, to whom, and on what terms. Data clean rooms, consent management platforms, and audience onboarding workflows all need to add an agent-authorisation layer that does not currently exist as a standard.
How does first-party data currently enter the buying process?
A brand's first-party audience -- customers, subscribers, site visitors matched through a clean room or a data onboarding platform -- enters programmatic buying through a structured process. The brand's data controller reviews the activation use case, confirms the audience data has a lawful basis for processing, and approves it for a specific platform or campaign. That approval is the act of a person with legal accountability for the data.
The data itself does not leave the brand's environment unchanged. Clean room infrastructure allows audience segments to be matched and activated without raw personal data being shared. The output is a matched audience or an audience index, and the human approval governs what that output can be used for.
This process works because humans make the decisions at each gate. The data controller decides what can be shared. The agency or trading desk decides how to use it. The DSP executes against it.
Where does the agent-buying model create a gap?
An agent negotiating a deal on a buyer's behalf may seek to include audience data access in the deal terms: a publisher's first-party audience, a contextual segment, or a data partnership. Under current frameworks, whether that data access is available depends on whether a human on the seller's side has pre-authorised the audience for the type of buyer the agent represents.
The gap is not in whether data can be shared. It is in who authorises the sharing at the point of negotiation. If an agent can negotiate audience access autonomously, without a human data controller on each side approving the specific transaction, the data sharing happens outside the consent architecture the lawful basis was established for.
GDPR's accountability principle requires that a data controller be able to demonstrate compliance with the regulation for every processing activity. An agent-negotiated deal that accessed audience data the agent decided to include in the deal terms, without the controller's pre-authorisation of that specific transaction, is a compliance gap -- not in the impression data, but in the decision to use the audience at all.
Can an agent be a data controller?
No. A data controller under GDPR is a natural or legal person, a public authority, an agency, or any other body that determines the purposes and means of processing personal data. A software agent has no legal standing as a person or body. It cannot determine processing purposes in the legal sense; it can only act on purposes its human principal determined and encoded into its mandate.
This is not a technicality. It is the boundary that determines what an agent may and may not negotiate autonomously. An agent may agree to use a pre-authorised audience segment -- one its human controller has already approved for this type of use -- without referring back. An agent may not agree to access a new audience or a new data partnership without a human authorisation step, because that step is required for the lawful basis to exist.
What does this require in practice?
A buyer deploying an agent for deal negotiation needs to pre-authorise, explicitly and in writing, what audience data the agent may include in deal terms. That pre-authorisation is the act of a human data controller, and it defines the outer boundary of what the agent can legitimately negotiate.
The same applies on the sell side. A publisher deploying an agent to negotiate inventory deals needs to define which audience segments may be offered to which categories of buyer, at what level of granularity, and on what terms. The agent negotiates within those bounds. Any deal that would take the agent outside them requires a human referral step.
Data clean room platforms and consent management vendors will need to add an agent-authorisation layer: a structured record of what a data controller has pre-approved for agent negotiation, queryable by the agent at deal time, and auditable after the fact. The IAB's Transparency and Consent Framework provides the structural model. Extending it to cover agent-negotiated data access is the next version of the work the industry already knows how to do.
What is the cost of getting this wrong?
A consent or data governance failure in programmatic advertising has typically affected a single campaign or a single platform. An agent-negotiated data access decision that falls outside the data controller's pre-authorisation affects every deal the agent agreed in the relevant period. The scale of agentic execution amplifies both the benefit and the risk.
The industry's data clean room investments were made, in part, because privacy regulators demonstrated they would pursue enforcement against publishers and platforms that processed data outside the lawful basis. An agent that negotiates data access without a pre-established authorisation framework does not create a new legal regime. It operates in the existing one, and the existing one assigns accountability to the human controller whose agent acted. Making sure that controller's mandate is explicit, documented, and limited to what has a valid legal basis is the governance work that has to precede the deployment of any buyer-side or sell-side data agent.
________________
This article references the General Data Protection Regulation's accountability and controller definitions, the IAB's Transparency and Consent Framework as the existing industry standard for consent management in digital advertising, and the IAB Tech Lab's published agentic advertising specifications on mandate governance and human approval thresholds.