The United States regulates consumer data state by state rather than nationally, and the resulting patchwork determines what a programmatic campaign can do in each place. The operational effect is substantial.
Obligations vary by where the consumer is
Different states impose different requirements around opting out of targeted advertising and the sale or sharing of personal information, with different thresholds and definitions.
Because the rule follows the consumer rather than the company, a single national campaign is subject to several regimes simultaneously.
Which means compliance has to be implemented at the level of the individual impression, based on inferred location, rather than as a company-wide policy.
The safest route is the narrowest one
Many companies resolve the complexity by applying the strictest applicable standard everywhere, since running multiple regimes is expensive and error-prone.
That reduces legal risk and also reduces addressable audience nationally, including in states with lighter requirements.
The alternative, honoring each state's rules separately, preserves reach and requires infrastructure most advertisers do not have and cannot easily build.
Signals have to travel with the bid
An opt-out is only effective if every party downstream knows about it, so consent and preference signals must be passed through the entire chain with each request.
Any partner that drops the signal creates exposure for everyone upstream, and the advertiser generally cannot verify handling beyond its immediate vendors.
Reducing the number of intermediaries is therefore a compliance measure as much as a cost measure, which is one reason supply path consolidation continues.
Requirements change on their own schedule
Additional states enact laws and existing ones are amended, so the map is not stable and any implementation is a maintenance commitment rather than a project.
Specifics differ meaningfully between states and change over time, so the operational details belong with counsel rather than with the media team.
What the media team needs to understand is the shape of the constraint: audiences are smaller, differently sized in different places, and shifting.
What this pushes advertisers toward
Data collected directly from customers with clear permission is easier to govern than data assembled from third parties, and its provenance is documented.
Contextual placement, buying the page rather than the person, sits largely outside the regime and has become more attractive for that reason alone.
The regulatory pressure and the technical decline of third-party identifiers point the same direction, which is why the shift has been faster than either would have caused alone.