Cross-border connected TV campaigns between the UK, Ireland and the EU

What to take away

What changes when one CTV campaign runs across Britain, Ireland and the EU

One campaign brief can cover London, Manchester, Dublin and Berlin, but the legal finish line moves with the viewer. A connected TV ad served to a household in Britain is processed under UK GDPR. The same creative served to a household in Ireland is processed under EU GDPR.

That single split changes your privacy notice, your consent banner and your data transfer terms.

Britain, Ireland and the EU campaign scope also brings three advertising codes into play. The UK Advertising Codes, written by the Committee of Advertising Practice and broadcast by Ofcom, apply to ads in Britain.

Irish advertising rules, enforced by the Advertising Standards Authority for Ireland, apply to ads in the Republic of Ireland. EU member states apply their own national rules under the AVMSD.

Measurement adds another layer. In the UK, BARB is the currency for TV audience measurement, and connected TV campaigns are planned and reported against it. In Ireland, measurement is handled differently, and in the EU each market has its own panel. A campaign that reports on one currency across all three will miss local trading norms.

Platform terms are not a substitute for law. A demand-side platform may accept a campaign and still leave you exposed if the consent signal does not meet UK GDPR or EU GDPR standards. The ICO has been clear that ad tech requires a valid lawful basis, and consent must be specific and informed.

Finally, the campaign clock differs. UK and Irish rules on when alcohol, gambling and high-fat, salt or sugar ads may run are not identical. A single daypart schedule can breach one rulebook while passing another.

UK GDPR, EU GDPR and Irish advertising rules side by side

UK GDPR and EU GDPR share a common ancestor, but they now operate as separate regimes. UK GDPR sits alongside the Data Protection Act 2018 and is enforced by the Information Commissioner's Office. EU GDPR applies directly in Ireland and the rest of the EU, enforced by national supervisory authorities such as the Data Protection Commission in Ireland.

The practical difference for connected TV advertising is consent. UK GDPR and EU GDPR both require consent to be freely given, specific, informed and unambiguous. But the ICO's guidance on UK GDPR and PECR treats some advertising cookies and identifiers differently from the ePrivacy rules in EU member states.

In Ireland, the ePrivacy Regulations 2011 sit alongside EU GDPR and are enforced by the Data Protection Commission.

Irish advertising rules add another layer. The Advertising Standards Authority for Ireland administers the Code of Standards for Advertising and Marketing Communications. That code covers misleading claims, children, alcohol, gambling and financial promotions. It applies to connected TV ads served to Irish viewers, even if the advertiser is based in London.

The table below sets out the main differences you need to plan for.

The table shows why a single consent string and a single privacy notice will not cover all three. You need jurisdiction-level lawful bases, and you need to record which basis applies to which viewer.

For a deeper look at how statute, codes and consent interact in the UK market, see statute, codes and consent. That article explains how the Communications Act 2003, the Ofcom Broadcasting Code and the CAP Code fit together for CTV.

Named regulator guidance: ICO, EU data authorities and Irish rules

The ICO is the UK's data protection authority. Its UK GDPR guidance and resources explains lawful bases, consent, transparency and international transfers. For connected TV advertising, the most relevant sections cover consent, legitimate interests and the right to object to direct marketing.

The ICO also publishes a Guide to Privacy and Electronic Communications Regulations. PECR sits alongside UK GDPR and governs cookies, similar technologies and electronic marketing. For CTV, that means the identifier used to target or measure an ad usually needs PECR consent, not just a UK GDPR lawful basis.

In the EU, the European Data Protection Board issues guidelines that national authorities follow. The Irish Data Protection Commission is the lead authority for many technology and advertising firms with EU headquarters in Dublin. Its decisions shape how EU GDPR applies to ad tech across the single market.

Irish advertising rules are enforced by the Advertising Standards Authority for Ireland. The ASAI's code covers taste and decency, children, alcohol, gambling and misleading advertising. Complaints can be upheld even when the advertiser is outside Ireland, because the ad was served to Irish viewers.

The EU GDPR text itself is available on the EU's legislation portal as the General Data Protection Regulation, which is also retained in UK law. Reading the source helps when you need to map a consent requirement to a specific article.

Regulators do not act in isolation. The ICO works with EU authorities through the Global Privacy Assembly and bilateral contacts. If a campaign is complained about in Ireland, the Irish authority can ask the ICO for assistance. That makes consistent documentation across Britain, Ireland and the EU more than a box-ticking exercise.

The AVMSD and cross-border CTV advertising

The Audiovisual Media Services Directive is the EU framework for audiovisual media, including on-demand and connected TV services. It sets rules on commercial communications, protection of minors, European works and accessibility. The directive applies to services targeting EU viewers.

For UK-origin services, it no longer applies directly after Brexit. A UK service that targets Irish or other EU viewers can face the destination state's AVMSD-derived rules.

The directive requires that audiovisual commercial communications be recognisable as such. It bans surreptitious advertising and limits product placement. For connected TV, that means ad formats that blend into content, such as interactive overlays, must still be clearly identifiable.

The AVMSD also sets a 30 percent quota for European works on on-demand services, with exemptions for low-turnover providers. That quota affects content catalogues on connected TV platforms, which in turn affects the inventory available to advertisers. If your campaign runs alongside EU-origin content, you are indirectly supporting compliance with that quota.

Rules on alcohol, gambling and unhealthy food are tightened under the AVMSD, with member states able to go further. That is why a creative cleared in Britain may need changes for Ireland or Germany. The directive encourages self-regulation and co-regulation, which is why national advertising codes matter as much as the statute.

The European Commission's page on the Audiovisual Media Services Directive sets out the current framework and amendments. It is the reference point when you need to show a client why EU targeting triggers AVMSD compliance.

Consent, identifiers and data transfers across borders

Consent for CTV identifiers is the hardest part of a cross-border campaign. A connected TV device identifier, such as an IP address or a device ID, is personal data under UK GDPR and EU GDPR. To use it for targeted advertising, you need a lawful basis, and in most cases that basis is consent.

UK GDPR and EU GDPR both require consent to be specific and informed. A single banner that says 'we and our partners use cookies' is unlikely to meet the standard. The ICO expects granular choices for advertising, and EU authorities expect similar. That means your consent management platform must pass the right signal to each market.

A worked signal test for a consent management platform:

Data transfers add another step. Sending UK viewer data to an EU-based ad server is a restricted transfer under UK GDPR. Sending EU viewer data to a UK-based ad server is a restricted transfer under EU GDPR. Both need a transfer mechanism, such as an adequacy decision or standard contractual clauses.

For UK to EU transfers, rely on the UK adequacy regulations under Article 45 UK GDPR. For EU to UK transfers, rely on the EU adequacy decision for the UK under Article 45 EU GDPR.

Where adequacy does not cover a transfer, use the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs). A short clause can read: 'The parties shall comply with the Approved EU SCCs Module Two and the UK IDTA Addendum.'

The UK has an adequacy decision for the EU, and the EU has an adequacy decision for the UK. Those decisions simplify transfers, but they are not permanent and can be changed. You should still document a transfer impact assessment and keep it current.

For a focused look at lawful bases beyond consent, see data protection, consent. That article compares consent and legitimate interests for CTV, which matters when you are choosing a basis for measurement or frequency capping.

A practical approach is to separate purposes. Use consent for targeted advertising and measurement, and use legitimate interests only where the law allows, such as for security or fraud prevention. Document each purpose, each basis and each market. That record is what a regulator will ask for first.

Scheduling, harm and misleading claims in three rulebooks

Scheduling rules differ across Britain, Ireland and the EU. In Britain, the Ofcom Broadcasting Code sets watersheds for television, and the CAP Code sets content rules for advertising. Alcohol ads cannot be shown in or adjacent to programmes aimed at under-18s. Gambling ads have similar restrictions.

Irish advertising rules are stricter in some areas. The ASAI code restricts alcohol advertising and includes rules on children and gambling. Ireland also has statutory restrictions on alcohol promotion under the Public Health (Alcohol) Act 2018. A campaign that runs in both markets must apply the stricter rule to the shared creative.

EU member states vary widely. Some ban alcohol advertising before a certain hour, others restrict gambling, and many have strict rules on advertising to children. The AVMSD allows member states to impose stricter rules, so you cannot assume that one EU clearance covers all.

The table below gives typical dayparts. Always check the current national code, because rules change and local exceptions apply.

For alcohol, Ireland uses a 9pm watershed under the Public Health (Alcohol) Act 2018. Germany uses an 8pm watershed, and France bans TV alcohol ads under Loi Evin.

Misleading claims are a common thread. UK GDPR and EU GDPR do not cover ad content, but consumer law does. In the UK, the Digital Markets, Competition and Consumers Act 2024 gives the Competition and Markets Authority stronger powers to act on misleading commercial practices.

The Digital Markets, Competition and Consumers Act 2024 is the context for claims about price, performance and environmental benefits.

In Ireland, the Consumer Protection Act 2007 and the ASAI code cover misleading claims. In the EU, the Unfair Commercial Practices Directive sets a similar baseline. A claim that is acceptable in one market may be misleading in another, especially for health, beauty and financial products.

For a broader view of how to apply these standards to CTV creative, see rules and ethics. That article covers taste, decency and harm in connected TV advertising.

What to document before a cross-border CTV launch

Before launch, assemble a compliance pack. It should include your lawful basis for each processing purpose, your consent records, your transfer impact assessment, your creative clearances and your scheduling rules. Regulators expect to see this pack on request, and platforms may ask for it during onboarding.

Use the checklist below to confirm you have covered the main items.

Numbered steps for the final week before launch:

After launch, review monthly. Regulation moves: the ICO updates guidance, EU authorities issue decisions and Irish rules are revised. A campaign that was compliant in September may need changes by January. Keep a change log and assign an owner.

For help with planning metrics that hold up across markets, see benchmark research. That article explains how to avoid vanity metrics when comparing CTV performance across borders.

For a pre-launch checklist focused on UK rules, see advertising rules. That article covers the checks to run before a UK CTV campaign goes live.

Common questions