Privacy-friendly measurement for influencer campaigns—what's actually compliant in 2025?

Стратегии инфлюенс-маркетинга (RU)
1

I got pulled into a compliance conversation last month that made me realize how hazy the legal landscape is for measuring influencer campaigns across Russia and the US.

On the US side, there’s CCPA and state privacy laws making cookie-based tracking increasingly difficult. On the Russian side, there’s PDPA and specific data localization requirements. And influencers themselves are sometimes contractually restricted about what data they can share.

But here’s what made it click for me: privacy-friendly measurement doesn’t mean you can’t measure. It means measuring differently.

I started looking at frameworks from US-based marketers who’ve already dealt with iOS privacy changes and GDPR-equivalent restrictions. The approaches they’re using are actually more interesting than old-school pixel tracking:

First-party data: Instead of relying on cookies, you build relationships with influencers where they share aggregated insights about their audience without sharing individual user data. “My audience is 60% women aged 25-34, interested in fitness” instead of “here are the 50,000 users I reached.”

Contextual measurement: Judge content performance based on what’s directly observable—watch time, shares, comments—without needing to track users across the internet.

Server-side attribution: When you control the endpoint (like a landing page or email signup), you can use server-side tools to measure conversions without relying on client-side tracking.

Privacy-first benchmarking: Instead of tracking individual users, you build benchmarks from aggregated, anonymized data. “Tutorials in the fitness category convert at 2.5% on average” without knowing which specific users converted.

The weird part? This approach is actually more honest about measurement uncertainty. You’re not pretending you can track someone across five websites—you’re being realistic about what you can measure.

For cross-market work specifically, I started asking: what data residency and privacy standards do I need to meet in each region? Then I built separate measurement frameworks that comply with each region’s requirements, but use similar KPIs where possible for comparison.

I’m curious: how are you folks handling privacy-friendly measurement right now? Are you still running into tracking limitations, or have you moved to alternative measurement methods?

2

You’re correctly identifying that the industry is in a transition phase. Cookie-based attribution is dying, and most brands haven’t fully adapted yet.

The framework you’re describing—first-party data + contextual measurement + server-side attribution—is solid. What I’d add: prioritize owned channels for measurement. That’s where you have the most data and compliance is clearest.

For influencer campaigns specifically, I’ve seen the most success when brands establish direct tracking relationships with influencers. The influencer includes a unique link or discount code, and that becomes your primary measurement signal. It’s not perfect, but it’s clean and compliant.

One important note on cross-market privacy: GDPR in the EU is stricter than CCPA in the US, which is stricter than Russian privacy law (though Russia has its own complexities with data localization). You can’t use the same approach everywhere.

Have you experimented with privacy-sandbox alternatives like Google’s Aggregated Reporting API or Privacy Sandbox initiatives? Those are the future, but they’re also still somewhat immature.

One more thing: be careful about what you ask influencers to track. Some contracts prohibit them from sharing individual user data, but aggregated insights are usually fine. Know the difference and get it documented.

3

Privacy and measurement don’t have to be in conflict, but they usually are because we’ve been building systems that assumed unlimited tracking.

What you’re describing aligns with what the data industry is actually moving toward. We’ve been testing aggregate measurement approaches with influencer partners, and the data is still useful—it’s just different.

For example, instead of tracking “user 47293 clicked link X and bought product Y,” we’re tracking “10% of engaged users from this influencer’s content completed a purchase within 7 days.” Same insight, privacy-compliant.

The tricky part is that some marketers see the drop from 99% data certainty to 85% data certainty and panic. But that’s not actually a loss—that 85% was usually overconfident anyway.

One thing we’ve had to adjust: performance benchmarking becomes harder when you don’t have individual-level data. You can’t segment by user demographics anymore. So we’re benchmarking by audience characteristics (what the influencer tells us) instead of by tracked user segments.

Cross-market, this is actually helpful because Russian data residency requirements would have stopped us from centralized tracking anyway. Privacy-friendly measurement aligns with how we’d have to operate legally.

4

We’re dealing with this right now because we’re moving into EU markets and can’t use our historical tracking approach anymore.

The frustrating part is that advertisers keep asking us for detailed conversion data, but we literally can’t collect it compliantly. So we’ve had to rebuild our pitch: instead of “we’ll prove ROI with pixel-level tracking,” we say “we’ll establish compliance and measure intelligently within those constraints.”

The first-party data approach you mentioned is what we’re leaning into. We ask influencers to share audience composition (not individual users), and we build expectation settings around that.

One thing I’m wondering: for conversion measurement specifically, how do you handle the gap? If I run an influencer campaign and see sales go up, but I can’t prove the influencer caused it, how do you justify the spend to investors?

We’ve mostly moved to “incremental testing”—run the campaign in some regions but not others, measure the difference. But that’s expensive and slow.

5

From a partnership perspective, this is actually clarifying. When we’re setting up collaborations, being transparent about what data the brand can and can’t track makes the relationship clearer.

I’ve sat down with creators who were nervous about data privacy, and honestly, explaining that we’re moving to privacy-first measurement has actually made them MORE comfortable partnering.

It’s weird how that works—they feel like they’re not being “tracked” across the internet, and brands get clean compliance.

I’m thinking about how to introduce this to creators I work with. Like, instead of asking “can you share your user data,” I’d ask “can you share audience composition and engagement metrics.” Different ask, same insight.

Do you share your privacy approach with creators upfront in the briefing, or do they not need to know the details?

6

Honestly, I like this approach way more than brands asking me for detailed analytics. I don’t have access to most user-level data anyway, and brands asking for it always feels weird.

What I’ve been able to share with brands: “Out of my audience, roughly 40% is interested in fitness, 35% is interested in wellness, 25% overlap both. When I post product reviews, about 8-12% of my followers engage, and of those, roughly 10-15% click through.”

That’s actually the useful information, and it doesn’t require me to sell user data or do anything that feels creepy.

The privacy-first approach feels way more authentic to how influencer marketing actually works. We’re recommending products to our audiences, not tracking them. The recommendation either resonates or it doesn’t.

I’m curious though: when brands measure this way, do they value engagement rate more heavily? Because that’s what I can actually influence—like, I can make content that gets shared more, but I can’t control whether someone buys.