A practical guide to ethical AI in programmatic advertising for UK-based remote workers: data protection, cookie consent, the advertising codes, AI-generated ads, bias and the skills employers want.
Programmatic advertising uses software to buy and place ads automatically, often in milliseconds. AI is now used to target audiences, set bids and even write ads. If you work in this field, remotely or not, you'll be expected to understand the rules and the risks. Here's a practical overview for the UK.
Where AI is used in ad tech?
- Targeting and audiences: predicting who's likely to be interested or to buy.
- Bidding: deciding how much to pay for each impression.
- Creative: generating or testing headlines, images and video.
- Measurement: modelling results when tracking data is incomplete.
- Brand safety and fraud: spotting unsuitable pages and fake traffic.
Data protection comes first
Most ad targeting uses personal data, so UK GDPR and the Data Protection Act 2018 apply. The ICO, the UK regulator, expects organisations to:
- have a lawful basis for using personal data and be transparent about it;
- take extra care with special category data, such as health, religion or sexuality, which shouldn't be inferred and used for targeting without strong justification;
- carry out a data protection impact assessment for high-risk processing, which AI-driven profiling often is;
- be able to explain automated decisions that have significant effects on people.
Cookies and tracking
The Privacy and Electronic Communications Regulations (PECR) require consent for most non-essential cookies and similar tracking, including advertising cookies. The Data (Use and Access) Act 2025 relaxed the rules for some low-risk uses, but advertising and profiling cookies still generally need consent, and the ICO has been reviewing how major websites handle cookie banners. Fines for breaching PECR can now reach £17.5 million or 4% of global turnover.
The advertising codes
Ads in the UK must follow the CAP Code (non-broadcast) and BCAP Code (broadcast), enforced by the Advertising Standards Authority. Ads must not be misleading, harmful or offensive, whether a person or an AI wrote them. Key points:
- AI-generated images mustn't exaggerate what a product does, for example in beauty ads.
- Strict rules apply to ads for gambling, alcohol and products high in fat, salt or sugar, especially where children may see them.
- Influencer and affiliate content must be clearly labelled as advertising.
The ASA has said that its rules apply in the same way to AI-generated ads, and that the advertiser remains responsible.
Bias and fairness
Algorithms can deliver ads in ways that discriminate, even unintentionally, for example showing job or housing ads mostly to one group. The Equality Act 2010 still applies. Good practice includes testing delivery across groups, avoiding proxies for protected characteristics and documenting decisions.
If you work with EU clients
The EU AI Act is being phased in and includes transparency duties, such as labelling some AI-generated content. If your clients or audiences are in the EU, check which parts apply and when.
Skills employers want
- Understanding of consent management, data minimisation and privacy-friendly measurement.
- Ability to explain AI-driven decisions to clients in plain English.
- Familiarity with the CAP Code and sector rules.
- Practical testing skills: checking model outputs for errors and bias.
A simple ethics checklist
- Would the people targeted expect their data to be used this way?
- Is the ad truthful and suitable for everyone likely to see it?
- Has a person reviewed AI-generated creative before it goes live?
- Can you explain why an audience was chosen?
- Is there a record of the decisions made?
Sources and further reading
- ICO: guidance on AI and data protection
- ICO: guidance on cookies and similar technologies
- ASA/CAP: the CAP Code
- European Commission: AI Act
Facts checked on 20 October 2026. Spotted an error? Tell us and we will correct it.
Frequently asked questions
What should you know about Data protection comes first?
Most ad targeting uses personal data, so UK GDPR and the Data Protection Act 2018 apply.
What should you know about Cookies and tracking?
The Privacy and Electronic Communications Regulations (PECR) require consent for most non-essential cookies and similar tracking, including advertising cookies.
What should you know about the advertising codes?
Ads in the UK must follow the CAP Code (non-broadcast) and BCAP Code (broadcast), enforced by the Advertising Standards Authority. Ads must not be misleading, harmful or offensive, whether a person or an AI wrote them.
What should you know about Bias and fairness?
Algorithms can deliver ads in ways that discriminate, even unintentionally, for example showing job or housing ads mostly to one group. The Equality Act 2010 still applies.
Related Articles
Chris is a freelance writer and editor covering a wide range of topics with a focus on accuracy and depth.
Last updated: 2026-04-25 · Fact-checked by editorial team
Content Attribution: All content on Programmatic AI & Remote Job Board is original. External sources are attributed where applicable. Trademarks belong to their respective owners.