Google has announced a significant shift in its advertising practices, informing advertisers that starting on or shortly after August 3, 2026, it will begin utilizing IP addresses for ad measurement and personalization across the European Economic Area (EEA), the UK, and Switzerland. This move redefines the purpose of IP addresses, transitioning them from merely network routing identifiers to crucial device identifiers for targeted advertising. Such a fundamental change inevitably triggers new consent requirements under stringent UK and EU privacy laws like GDPR.
The tech giant frames this impending update as a step towards “privacy-enhancing technologies,” referencing methods like on-device processing, trusted execution environments, and secure multi-party computation. However, a key point of concern is that granular user controls specifically for IP-based personalization will not be fully available until later in 2026 or early 2027, leaving a potential gap between policy changes and user agency.
Historically, Google already collects IP addresses via customer tags, SDKs, HTTP requests, and direct uploads, primarily for traffic routing and ad delivery. Post-August 3, 2026, these same IP addresses will also be leveraged to uniquely identify devices for the purposes of measurement and personalized advertising. Google will also register under the IAB Europe Transparency and Consent Framework for Feature 3, which specifically addresses identifying devices through automatically transmitted information, including IP addresses. This move positions IP-based personalization as a process requiring explicit user consent, rather than relying on legitimate interest, under the framework.
The Evolving Landscape of Ad Personalization and Privacy
The reclassification of IP addresses as direct identifiers for ad personalization is particularly noteworthy given that IP addresses are unequivocally considered personal data under GDPR. Using an IP address to identify a device is a core component of “fingerprinting”—a method notorious for tracking users even when cookies are blocked or cleared. This contrasts sharply with Google’s earlier stance; in 2019, former Chrome engineering director Justin Schuh criticized fingerprinting for undermining user choice, stating users couldn’t clear it like cookies. Yet, in December 2024, Google reversed its long-standing ban on fingerprinting for advertisers, a decision the UK’s Information Commissioner’s Office (ICO) swiftly labelled “irresponsible.”
The timing of Google’s August 2026 rollout directly clashes with recent guidance from the ICO. On May 18, 2026, the ICO advised the UK government that consent should be paramount for online advertising involving tracking that creates profiles across multiple services, while allowing limited advertising without consent only if based on the immediate context being viewed. Under this framework, IP address-based personalization across different platforms squarely falls into the category requiring explicit user consent. While the ICO has confirmed no regulatory changes have taken effect and current rules apply, the potential for enforcement actions remains unclear. Google has, however, sent a reminder to advertisers, reiterating their responsibility for compliance and adherence to Google’s EU User Consent Policy.
For users, direct controls over IP-based personalization on Google’s own properties will be delayed. In the interim, users can decline non-essential cookies, review and adjust ad personalization settings at myadcenter.google.com, and employ privacy-focused browsers like Firefox or Brave. VPNs can also mask IP addresses, albeit by changing rather than eliminating the identifier. Users should regularly check myadcenter.google.com to manage their ad profiles. The ultimate question of whether Google’s new approach will align with the ICO’s stringent consent standards, and what enforcement actions might follow, still hangs in the balance.
Key Details of Google’s IP Ad Personalization Update
| Feature | Details |
|---|---|
| Effective Date | On or shortly after August 3, 2026 |
| Affected Regions | European Economic Area (EEA), UK, Switzerland |
| Core Change | IP addresses used for ad measurement and personalization (in addition to network routing) |
| Regulatory Context | Triggers new consent requirements under UK & EU privacy laws (e.g., GDPR) |
| Google’s Stance | Previously against fingerprinting, reversed ban in Dec 2024 |
| ICO’s Position | Called Google’s reversal “irresponsible,” emphasizes consent for cross-service tracking |
| User Controls | Specific IP-based personalization controls not available until late 2026/early 2027 |
| Advertiser Responsibility | Must comply with Google’s EU User Consent Policy |
