Verizon Media

Verizon Media, now Yahoo, typically sets advertising cookies such as A1, A3, and B that store advertising identifiers for behavioural targeting and measurement, plus an IDSYNC cookie that synchronises identifiers with partner networks. All of these are advertising cookies rather than functional ones. Because of the rebrand, they may appear under the Yahoo name in cookie scans.

Yes, consent is always required because all Verizon Media cookies are advertising cookies that are never strictly necessary under ePrivacy Art. 5(3). Consent must be captured before any advertising script loads, ideally through a TCF compatible consent platform. The scripts must stay fully blocked until the visitor gives valid, freely given consent.

The only valid legal basis is consent under GDPR Art. 6(1)(a) and ePrivacy Art. 5(3), as legitimate interest is not appropriate for cross site behavioural advertising. Consent is typically managed through the IAB Europe Transparency and Consent Framework. You must ensure the consent signal is genuine and correctly transmitted to Verizon Media and its partners.

Yes, advertising data is processed in the United States and shared with advertising partners. Transfers outside the European Economic Area rely on Standard Contractual Clauses and supplementary safeguards. Because the data flows through a wide ad network, you should scrutinise the transfer chain and disclose it clearly in your privacy notice.

Yes, a DPIA is strongly recommended and often required because cross site behavioural advertising and large scale profiling are explicitly treated as high risk processing. The assessment should cover the profiling scope, the reliance on consent, the partner sharing, and the US transfers. Documenting these risks and mitigations is essential before deploying the tags.

Block all Verizon Media advertising scripts until the visitor gives valid consent through a TCF compatible consent management platform, and pass the consent string to the vendor. Disclose the advertising purposes, the partner list, and the US transfers in your privacy and cookie policies. Conduct a DPIA, honour withdrawal requests promptly, and review the partner list regularly.

Yes, alternatives include other advertising networks and demand side platforms, as well as privacy focused or contextual advertising solutions that do not rely on cross site profiling. Contextual advertising in particular can reduce consent and transfer obligations because it does not track individuals. Evaluate each option against your risk appetite and compliance requirements.

List the Verizon Media advertising cookies such as A1, A3, B, and IDSYNC with their purpose and duration, and classify them all as advertising cookies that require consent. Explain that the brand now operates as Yahoo and that data is shared with partners and transferred to the United States under Standard Contractual Clauses. Update the policy whenever the partner list or cookie set changes.