Lesson 1 of 4 · 8 min read · advanced
The standards bodies: who writes ad tech’s rules
IAB, IAB Tech Lab, MRC, TAG, ANA, WFA, Prebid.org, ISBA and ASCI: what each industry body does and why their standards shape every ad you see.
Nobody passed a law saying an ad must be 50% on screen for one second to count as viewable, or that a website must publish a file listing who may sell its ads. Those rules came from industry bodies: associations of companies that agree on shared technical and commercial standards so millions of machines from rival firms can trade with each other. Knowing who they are helps you judge which rules are binding, which are voluntary, and who wrote them.
Think of football. FIFA writes the laws of the game, referees’ associations train and certify referees, and each country’s football association runs its own leagues. Ad tech has a similar split: some bodies write the technical rulebook, some audit whether measurement is honest, some certify that companies play fair, and some represent the teams paying for it all.
Four jobs, many acronyms
- Write the technical specsHow a bid request is formatted, how a video ad is described, how a site declares its sellers. Mainly IAB Tech Lab and Prebid.org.
- Audit the measurementCheck that companies counting impressions, viewability or invalid traffic do it accurately. Mainly the MRC.
- Certify good behaviourRun programmes that companies join and are checked against, for example anti-fraud. Mainly TAG.
- Represent the interestsLobby, publish research and set commercial guidelines for their members: advertisers (ANA, WFA, ISBA) or the broader industry (IAB, IAB Europe). Some countries also have advertising self-regulators, such as ASCI in India.
Who is who
| Body | Who belongs | What it is known for |
|---|---|---|
| IAB (Interactive Advertising Bureau) | Publishers, platforms and ad tech firms, mainly in the US; national IABs exist in many countries | Industry research such as ad revenue reports, guidelines, lobbying on privacy law |
| IAB Tech Lab | Technology companies across the supply chain | OpenRTB, VAST, ads.txt, sellers.json, SupplyChain object, ads.cert, OM SDK, IAB Global Privacy Platform |
| IAB Europe | National IABs and companies in Europe | The IAB TCF consent framework used to pass GDPR consent signals |
| MRC (Media Rating Council) | Media owners, advertisers, agencies | Audits and MRC accreditation; co-authors viewability and IVT guidelines |
| TAG (Trustworthy Accountability Group) | Advertisers, agencies, publishers, ad tech | TAG Certified Against Fraud, anti-piracy, brand safety and malvertising certifications; TAG Registry IDs |
| ANA (Association of National Advertisers) | US brand advertisers | Research on transparency and waste, contract guidance for buyers |
| WFA (World Federation of Advertisers) | Global brands and national advertiser associations | Global media principles, brand safety work, cross-industry measurement initiatives |
| ISBA | UK advertisers | The ISBA/PwC programmatic supply chain studies and model contracts |
| Prebid.org | Publishers and ad tech companies | Open-source Prebid header-bidding code used on a large share of the open web |
| ASCI (Advertising Standards Council of India) | Advertisers, agencies, media in India | Self-regulatory advertising code, complaints handling and influencer disclosure guidelines |
Voluntary, but hard to ignore
Almost none of these bodies can fine anyone. Their power comes from adoption. If every major DSP refuses to buy from sites without a valid ads.txt file, publishing one becomes compulsory in practice. If big advertisers only pay for impressions measured by MRC-accredited vendors, accreditation becomes a condition of doing business. The standard wins when the people holding the money insist on it.
Industry standard
- Written by an industry body, often through member working groups
- Enforced by contracts and buyer demands
- Can change fast when the market shifts
- Example: sellers.json, MRC viewability
Law or regulation
- Passed by a government or regulator
- Enforced by courts and fines
- Changes slowly and varies by country
- Example: GDPR, India’s DPDP Act, COPPA
How a standard gets made
- A problem appearsFor example, fraudsters pretending to be famous websites (domain spoofing).
- A working group drafts a fixMember companies volunteer engineers to write a specification.
- Public commentThe draft is published so anyone can comment before it is finalised.
- Release and adoptionThe final version is published. Adoption depends on the biggest buyers and sellers building it in.
- Audit and enforcementBodies such as MRC and TAG, and buyer contracts, check that companies actually follow it.
Critics point out that the companies being regulated are the ones writing the rules, and that standards can favour large members who can afford to build them. Supporters answer that no government could move as fast as the technology. Both are partly right, which is why laws now increasingly sit on top of industry standards rather than replacing them.
Key takeaways
- Industry bodies split four jobs: writing specs, auditing measurement, certifying behaviour and representing members.
- IAB Tech Lab writes most technical standards; MRC audits measurement; TAG certifies anti-fraud and other programmes.
- Advertiser bodies such as ANA, WFA and ISBA push for transparency on behalf of the people paying.
- Standards are voluntary but become compulsory in practice when major buyers require them.
Questions people ask
What is the difference between IAB and IAB Tech Lab?
The IAB is a trade association that represents the digital advertising industry, publishes research and lobbies on policy. IAB Tech Lab is its technical standards arm, where member companies write specifications such as OpenRTB, VAST, ads.txt, sellers.json and the Global Privacy Platform. Put simply, the IAB speaks for the industry and the Tech Lab writes the code-level rules it runs on.
What does the Media Rating Council do?
The Media Rating Council is a US industry body that audits and accredits measurement services, checking that companies counting audiences, impressions, viewability or invalid traffic do so accurately and transparently. It also co-develops measurement guidelines, such as the viewability and invalid traffic standards. Many advertisers prefer or require MRC-accredited metrics when agreeing what they will pay for.
Are ad tech standards legally binding?
Most are not. Standards from bodies like IAB Tech Lab, MRC and TAG are voluntary. They become binding through contracts, for example when a buyer requires ads.txt authorisation or MRC-accredited measurement before paying. Laws such as GDPR, COPPA or India’s DPDP Act are different: they are enforced by regulators and courts, with fines and orders.