What is a data clean room?
A secure environment where two parties can analyse their combined data without either seeing the other's raw records — developed because privacy regulation and the loss of third-party tracking made direct data sharing untenable.
The problem it addresses. An advertiser knows who bought; a publisher or platform knows who saw the advertising. Answering "did the people who saw it buy?" requires matching the two datasets — which historically meant one party handing over customer data to the other. That is now frequently unlawful, commercially unacceptable, or both.
How a clean room works. Both parties upload data into a controlled environment. Queries are restricted to a permitted set, and only aggregated outputs are returned — never individual records. Neither party can extract the other's data, and neither can see it.
Matching is done on hashed identifiers, so records are joined without revealing the underlying values.
What it is used for: measuring campaign overlap and incremental reach across platforms; audience analysis without sharing customer lists; attribution across walled gardens that will not share user-level data; and retail media, where a retailer's purchase data is matched to a brand's campaign exposure — currently the fastest-growing application.
The controls that make it a clean room rather than merely shared storage:
Aggregation thresholds — results are suppressed unless they cover a minimum number of individuals, preventing an answer about one person.
Query restrictions and logging, so permitted analyses are defined in advance.
Differential privacy in some implementations, adding statistical noise so individuals cannot be isolated even across many queries.
The limitations, which are worth stating:
Privacy is a matter of configuration. A poorly configured clean room can leak individual-level information through repeated differencing attacks, and the guarantees depend entirely on the controls actually applied.
Match rates are frequently modest, so the analysable overlap is smaller than expected.
They are expensive and technically demanding, which limits them to larger organisations.
A clean room does not create a lawful basis for processing — the underlying data still needs one.