The complexities of the digital advertising system have attracted the scrutiny of data privacy regulators in the EU and UK, particularly in relation to valid consent, transparency and lawful basis. We look at a range of approaches at EU, Member State and UK level, and consider the impact of industry-led solutions (like IAB Europe's TCF), and developing technologies.