Geo-Targeted Advertising (Advertising & Marketing Law - concept 53)

Geo-Targeted Advertising

Geo-targeted advertising—also called location-based advertising—is the practice of delivering ads based on a user’s geographical location, whether broad (country, region) or extremely precise (GPS coordinates, real-time movement).

This capability has become central to modern marketing, but it also raises significant privacy, consent, discrimination, fairness, and transparency concerns. As a result, geo-targeting is regulated by a complex mix of data protection laws, advertising standards, platform rules, and sector-specific limitations.

This post provides a complete legal overview of geo-targeted advertising, including:

how it works
what the law allows and prohibits
types of location data
consent requirements
sensitive-location rules
enforcement cases
best practices for legal compliance

1. What Is Geo-Targeted Advertising?

Geo-targeted advertising uses location data to adapt ads to users living in or currently situated within a specific geographic area.

Examples include:

Showing ads for local restaurants or delivery services
Targeting users near a specific store or shopping mall
Serving country-specific product versions
Tailoring ads based on regional laws (e.g., alcohol, gambling, healthcare products)
“Geofencing” users who enter a defined physical area (e.g., airport, stadium, clinic)
Excluding certain locations from campaigns (geoblocking or geo-filtering)

Geo-targeting can range from coarse (country, region, city) to highly precise (exact GPS coordinates, building-level targeting).

2. Types of Location Data Used in Advertising

Understanding the type of location data is legally important because stricter rules apply to more precise data.

A. IP-Based Location (Low Precision)

Derived from the user's network
Usually accurate at the country or city level
Often allowed without explicit consent (depending on region)

B. GPS / Satellite Location (High Precision)

Pinpoints exact coordinates
Requires explicit opt-in consent in most jurisdictions
Considered sensitive personal data due to tracking risks

C. WiFi & Bluetooth Location

Estimates the user’s position via nearby signals
Requires clear permission and transparency

D. App-Based Location Services

Mobile apps may request permission to access location in the background or foreground
Strict rules apply to:
- data retention
- purpose limitation
- avoiding “excessive or persistent tracking”

E. Inferred Location

Estimated from behaviour (language, visited websites, time zone)
Less regulated but still subject to transparency obligations

3. Global Legal Frameworks Governing Geo-Targeted Advertising

A. European Union – GDPR & ePrivacy Directive

Location data = personal data, often sensitive depending on precision
Requires explicit, freely given consent for high-precision location tracking
Users must be able to withdraw consent easily
Profiling based on location must be disclosed
Special protections for:
- children
- vulnerable groups
- sensitive locations (clinics, places of worship, political rallies)

B. United Kingdom – UK GDPR & PECR

Same standards as the EU
ICO guidance prohibits targeting users at clinics, shelters, or political events without strong justification
Heavy enforcement for apps misusing location data

C. United States – FTC + State Laws (CCPA/CPRA, Colorado, Virginia)

Location data considered sensitive personal information under CPRA
Consumers have the right to:
- know what location data is collected
- opt-out of sale/sharing
- limit use of precise geolocation
FTC prohibits deceptive collection or misuse of location data

In 2023–2024, the FTC fined companies for:

collecting precise location without consent
selling location data related to reproductive health clinics
tracking users even after they disabled location services

D. Other Regions

Canada (PIPEDA): requires meaningful, informed consent
Brazil (LGPD): location data must be processed fairly and transparently
Australia (Privacy Act): consent and reasonable necessity required
Asia-Pacific: increasing restrictions on precise geolocation tracking

4. Legal Limits on Geo-Targeted Advertising

A. Consent Requirements

You must obtain opt-in consent when using:

GPS
WiFi/Bluetooth
highly precise geolocation
continuous/location-in-background tracking
geofencing

Consent must be:

freely given
unambiguous
specific to location tracking
revocable at any moment

Pre-ticked boxes or vague notices (“we may use your data for marketing”) are prohibited.

B. Sensitive Locations Restrictions

Many jurisdictions prohibit or severely restrict targeting or retargeting users based on visits to:

hospitals
mental health clinics
reproductive health facilities
addiction treatment centres
shelters
religious sites
political events
LGBTQ+ centres
schools
financial hardship locations (debt counselling centres)

Collecting location data in these areas can be considered intrusive, discriminatory, or exploitative.

C. Discrimination and Exclusion Risks

Geo-targeting cannot be used to:

exclude protected groups from opportunities
restrict credit, housing, or job ads to certain neighbourhoods
target vulnerable communities with harmful offers

Regulators have penalised platforms for allowing advertisers to exclude minorities or low-income areas from viewing housing or employment ads.

D. Data Minimization & Purpose Limitation

Advertisers may only collect location data necessary for the specific campaign.
Storing it indefinitely—or using it for unrelated ad targeting—is unlawful.

Apps cannot request continuous location access when only occasional access is needed.

5. Platform-Specific Rules

A. Google

Requires explicit consent for personalised ads based on precise location
Prohibits targeting users based on sensitive location signals

B. Meta (Facebook/Instagram)

Precise location tracking requires permission
Restrictions on sensitive-location-based ad audiences

C. TikTok

Users must grant location permissions
Targeting based on sensitive attributes is banned

D. Apple (ATT Framework)

Apps must request permission to track users across apps and devices
Users may choose “Allow only while using the app” or reject entirely

Platforms often impose stricter rules than governments.

6. Enforcement and Case Studies

Regulators have fined companies for:

Tracking users even after location services were turned off
Selling precise location data to advertisers without consent
Geofencing people at clinics with targeted ads (“You visited a clinic today…”)
Collecting background location data unrelated to app functions
Not informing users that third parties (e.g., ad networks) receive their location

Penalties include:

multimillion-dollar fines
bans on using precise geolocation
deletion of all location datasets
mandatory user notifications
reputational damage

7. Best Practices for Compliant Geo-Targeted Advertising

Ask for explicit, granular opt-in consent.
Avoid precise GPS targeting unless necessary.
Never target sensitive locations.
Use coarse geo-targeting (city/country) when possible.
Explain location usage clearly in privacy notices.
Provide an easy opt-out switch.
Limit data retention periods.
Audit third-party ad partners and SDKs.
Avoid discriminatory exclusions.
Respect platform-level consent frameworks (Google, Apple, Meta).

8. Why Geo-Targeting Regulations Matter

Geo-targeting can improve the relevance and effectiveness of marketing—but when misused, it becomes a form of digital surveillance.

The law aims to ensure that location-based advertising remains:

transparent
proportionate
non-discriminatory
respectful of privacy

In a world where location reveals identity, routine, health, and beliefs,
responsible geo-targeting is a legal obligation—
and a foundation for consumer trust.

Search This Blog

Mastering Accounting CAT

Featured

Presenting MAACAT - Mastering Accounting CAT