AmazonScience/document-haystack

1Responsible business continued2Operating with integrity3Improving ethical standards online4As we move more of our business online, our 5responsibility to our customers and advertisers 6is greater than ever. Customers deserve and 7expect a safe experience, while advertisers 8need to trust their ads will appear in 9appropriate environments.10Our machine-learning-powered brand safety 11tool, Mantis, ensures our clients’ ads only 12appear in safe, appropriate environments, 13proving 100% accuracy and a faster safety 14categorisation, compared to traditional 15blocklist methods.16Reach remains an active participant in industry 17bodies. We comply with the Advertising 18Standards Authority’s (ASA) Code for Non-19broadcast Advertising and are members of 20The Trust Project, whose mission is: ‘To amplify 21journalism’s commitment to transparency, 22accuracy, inclusion and fairness so that the 23public can make informed news choices’.24Our CEO Jim Mullen has been the chair of the 25News Media Association (NMA) throughout 262022 and 2023, stepping down as planned at 27the end of 2023. Reach is also a Board Member 28partner of the Internet Advertising Bureau and 29a member of the News Media Coalition.30Data privacy progress31As customer data forms an increasingly 32important part of our strategy, we take our 33responsibilities in relation to privacy very 34seriously. To reduce the risk in how we handle 35and process data, we maintain a robust policy 36framework, deliver mandatory annual training 37for all employees and issue specific guidance 38on high-risk processing operations.39Protecting our customers  40and their data41In 2018, when the General Data Protection 42Regulation (GDPR) and the Data Protection Act 43(DPA) were introduced, we brought in policies, 44controls, procedures and mandatory training 45to manage personal data. Following our 2023 46expansion into the US, we now also comply 47with US privacy laws such as the California 48Consumer Privacy Act, the Virginia Consumer 49Data Protection Act and the Utah Consumer 50Privacy Act. 51Principles:  52Consumer trust  53and rights  54Lawful processing55Reach only processes personal 56data where it has a legal basis to 57do so.58Fairness and transparency59Reach processes personal 60data fairly and honestly, and 61communicates openly with 62individuals on how and why 63their data is being processed.64Individual rights65Reach respects individuals’ rights 66in relation to their personal data – 67including their rights of access, 68rectification, erasure, restriction, 69portability and objection – and 70provides timely responses. 71Principles:  72Data management 73practices  74Data minimisation 75and limitation76Reach only collects, stores and 77processes personal data that 78is relevant and necessary for the 79purpose for which it was collected.80Stewardship81Reach is committed to protecting 82individuals’ privacy and has 83appropriate policies, practices 84and training in place for the safe 85handling, storage, sharing, retention 86and deletion of the personal data 87it processes.88Data security89Reach takes appropriate technical 90and organisational security 91measures to protect personal data 92throughout its data lifecycle, and 93requires the same standards from 94its third-party service providers. 95DATA PROTECTION PRINCIPLES96In 2023, we developed a core set of fundamental principles to further embed a culture 97of data trust and integrity across every area of the business in all countries we operate in. 98These principles form the bedrock of our approach, inform our priorities and ensure we act 99with integrity when dealing with consumers’ data.10037101Reach plc Annual Report 2023Strategic Report Governance Financial Statements Other Information37Reach plc Annual Report 2023