Tpps

BlueKai

Badge: ⚠️ Caution

This work is licensed under CC BY-SA 4.0

BlueKai

FeldWert
Group / Parent ServiceData / DMP
Badge⚠️ Caution
Service TypeParent service
Sub-service / Relationship Note[not documented]
Infrastructure Only?No
Contact (DPO / Privacy)oracle_privacy@oracle.com
Assessment Date06/08/2026
Versionv2 (06/08/2026) | v1: 22/06/2026

Badge & Risk Assessment
  • Badge: ⚠️ Caution
  • Red Flags:
    • RF1 — Own advertising / cross-service profiling
    • RF3 — Broad onward sharing for others' own purposes
  • Risk Indicators:
    • Own-purpose data use; problematic profiling; opaque onward data sharing
Reasoning & Sources

Key Facts: Oracle BlueKai is a Data Management Platform (DMP) that aggregates cross-publisher audience data from multiple sources and shares it with advertising partners for their own targeting purposes — core RF1 and RF3. Oracle/BlueKai suffered a major data breach in 2020 exposing billions of records (reported by TechCrunch). Oracle has absorbed BlueKai into the Oracle Advertising portfolio; some features deprecated post-2023. US transfer (RF2 consideration).

Framework Note (v2.2): FRAMEWORK NOTE (v2.2): RF2 (high-risk third-country exposure) is recorded here as a significant risk factor and lowers the domain E score. Under the revised framework, RF2 alone does not trigger Caution — the Caution badge for this service is driven by RF1 / RF3 / RF4 (as noted above). The US transfer risk (where applicable) is covered by DPF participation and/or SCCs, which GDPR treats as a compliant transfer mechanism.

Quellen:

  • Oracle BlueKai (oracle.com/cx/advertising/data-management)
  • Oracle Privacy Policy (oracle.com/legal/privacy)
  • TechCrunch BlueKai breach report (Jun 2020).
Processing Purposes (Consenter)
  • Support marketing analytics
  • Receive personalised marketing offers
  • Customise online ads (non-TCF)
Notification & Objection Status
  • TPP Notified?: Not yet notified
  • Decision Contested?: [not documented]

Review Required

No review required.

Shape Consenter Together

Consenter is built on an open and participatory process that grows through community collaboration. Whether you share feedback, improve the documentation, or contribute to the Risk Configuration Guides or Technical Integration Guides, your expertise helps make Consenter more privacy-friendly, interoperable, and useful for everyone—including your own users and services: Get finally your benefits and control the risks when sharing personal data.

Last updated on

On this page