Fix Google Ads
Personalized Advertising
Violation

Log in to the email account connected to your Google Ads account. Google will have sent you a message explaining that one or more of your ads or your account has been flagged for violating the Personalized Advertising policy. The notice will describe the specific issue — such as targeting based on a sensitive category, using prohibited audience data, or collecting personal information without proper disclosures. Keep this email open throughout this process as it contains the exact details of what was flagged and which campaigns or ads are affected.

Personalized Advertising means showing ads to specific people based on information collected about them — such as their browsing history, interests, demographics, or past interactions with your website. Google allows personalized advertising but has strict rules about what data can be used, which topics can be targeted, and how users must be informed. The policy prohibits: targeting people based on sensitive personal categories such as health conditions, sexual orientation, race, religion, or financial hardship; using personal data collected without user consent; remarketing to users who visited sensitive pages; and making ads that feel intrusive or exploitative of personal characteristics.

Inside your Google Ads account, click the wrench icon at the top right, then select Policy Manager. Look for any ads, campaigns, or audience lists marked as disapproved, suspended, or limited. For each flagged item, write down: the ad ID, campaign name, audience list name, and the specific reason given. Also go to your Audience Manager under Tools and Settings and check whether any audience lists have been flagged or suspended. You must address every single flagged item — missing even one will cause your appeal to be rejected.

Go to support.google.com/google-ads/answer/143465 and read the Personalized Advertising policy page in full. Google outlines exactly which categories of advertising are prohibited, which require special handling, and what disclosures and consent mechanisms must be in place. Reading the actual policy page in full ensures you understand the complete scope of the requirements and that you are not missing any specific conditions that apply to your type of business or the audiences you are targeting.

The Personalized Advertising policy covers several distinct types of violations. Your issue may be one or more of the following: your ads or targeting are based on a prohibited sensitive category such as health, finances, sexuality, or religion; you are collecting or using personal data for ad targeting without proper user consent; your remarketing lists include users who visited pages about sensitive topics; your ad creative makes references to personal characteristics of the viewer; you have not set up the required consent mode or privacy disclosures; or your website is collecting data for advertising purposes without an accessible and accurate privacy policy. Knowing which specific type you have tells you exactly what to fix.

Some Personalized Advertising violations affect only specific ads that use prohibited targeting or language. Others affect entire audience lists that were built using prohibited data. In more severe cases the entire account may be suspended. Check Policy Manager carefully and also check your Audience Manager and Data Manager to understand the full scope. If the violation is at account level, you will need to address systemic issues across your entire advertising setup before an appeal can succeed.

Google prohibits targeting ads to people based on health conditions, medical history, disability status, or pharmaceutical use. This includes: custom intent audiences built around health-related search terms; remarketing to users who visited pages about specific medical conditions, treatments, or medications; customer match lists that contain health-related data; and audience segments that imply a health condition. Remove any audience lists, custom segments, or targeting settings that were built around health topics. Replace them with broad contextual or interest-based targeting that does not imply knowledge of individual health status.

Google prohibits targeting ads to people based on their financial difficulties, debt status, credit problems, or economic vulnerability. This includes: custom intent audiences built around searches for debt relief, bankruptcy, payday loans, or financial hardship; remarketing to users who visited pages about financial difficulties; and ad copy that implies the viewer is in financial trouble. Remove all such targeting and audience lists. If you offer financial products or services, you can target broad interest categories such as personal finance or investing, but you cannot target people based on signs of financial distress.

Google strictly prohibits targeting or excluding people based on sexual orientation or gender identity. This includes: any audience segments built around LGBTQ+ identity, interests, or related searches; any ad copy that assumes or references the sexual orientation or gender identity of the viewer; and any remarketing to users of specific LGBTQ+ focused content. Remove all such targeting from every campaign. Ads can be placed on content relevant to LGBTQ+ topics through content targeting, but they cannot be targeted to individuals based on inferred sexual orientation or gender identity.

Google prohibits targeting ads to people based on their race, ethnicity, or national origin. This includes: audience lists built around ethnic or cultural interests that are used in a discriminatory way; ad copy that singles out or excludes people based on ethnicity; and targeting combinations that effectively exclude or specifically target people of a particular racial or ethnic background. Review all your audience targeting and ad copy for any elements that could be interpreted as racially or ethnically discriminatory, even if unintentionally, and remove or rework them.

Google prohibits targeting individuals based on their religious beliefs, practices, or affiliation. This includes: custom audiences built around religious search terms or content consumption; remarketing to visitors of religious content in a way that implies personal religious belief; and ad copy that references or assumes the religious identity of the viewer. You can advertise religious products or services and you can place ads on religiously themed content through contextual targeting, but you cannot target individual users based on their inferred religious identity or beliefs.

Google's Personalized Advertising policy prohibits targeting individuals based on their political opinions, party affiliations, or voting behaviour. This includes: audience lists built around political search terms or content engagement; remarketing that implies knowledge of a person's political views; and ad copy that assumes or exploits the political identity of the viewer. Note that in addition to the Personalized Advertising policy, political advertising on Google has its own separate verification requirements. If you run political ads, ensure you are also compliant with those requirements.

Go to Tools and Settings in Google Ads, then click Audience Manager. Review every remarketing list you have created. For each list, check which pages or URL patterns were used to build the list. Any list built from visitors to pages about health conditions, financial hardship, relationship difficulties, immigration status, legal problems, substance use, mental health, or any other sensitive personal topic must be removed from all campaigns immediately. Google considers this a serious violation because it implies knowledge of sensitive personal characteristics.

Customer Match allows you to upload a list of customer email addresses or phone numbers to target those customers with ads. This is permitted under the policy provided the data was collected with proper consent and does not include sensitive personal information. If your Customer Match lists were compiled from data sources that include sensitive categories — such as lists of customers who purchased health products, sought financial advice about debt, or attended religious services — these lists must be removed. Only Customer Match lists built from general customer relationship data collected with proper consent are permitted.

Audience lists built using data purchased from third-party data brokers, or lists that include inferred sensitive attributes, are a violation of the Personalized Advertising policy. Review every audience list in your account and check its data source. If any list was purchased or obtained from a third party rather than collected first-party from your own website visitors or customers, and if that list includes data about sensitive personal characteristics, it must be removed. Only use first-party data that you collected directly, with user consent, from people who interacted with your own website or business.

Google requires that remarketing lists have a minimum number of users before they can be used for targeting — typically at least 1,000 users for Display campaigns and at least 1,000 users active in the past 30 days for Search campaigns. Lists that are too small to meet these thresholds will not serve, but they can also indicate that the list was built from a very specific and potentially identifiable group of people, which may contribute to a policy concern. Review all small lists and either expand them by adjusting the membership criteria or remove them if they cannot be built to a compliant size.

Every remarketing tag, tracking pixel, or cookie that your website uses to build audience lists must be disclosed to visitors through your privacy policy and, in regions where required by law such as the EU and UK, through a functional cookie consent mechanism. Go through every page of your website and identify all tracking scripts. Check that each one is mentioned in your privacy policy with a clear explanation of what it does and why. Check that your cookie consent banner correctly lists all third-party tracking and that users in applicable regions must actively consent before non-essential cookies are set.

Exclusion lists and negative audiences can be just as problematic as positive targeting lists under the Personalized Advertising policy. If you are using audience exclusions to prevent your ads from being shown to people based on sensitive characteristics — for example, excluding people who visited health-related pages, or excluding people who have specific financial interests — this can be treated as discriminatory targeting in reverse. Review all your audience exclusions and remove any that are based on sensitive personal categories or that could result in discriminatory ad delivery.

Ad copy that implies knowledge of the viewer's health status is a direct violation. Examples include headlines like We know you are struggling with back pain or Diabetes sufferers in your area need to read this. Even less direct references — such as If you have been told your cholesterol is high or For people managing a chronic condition — are prohibited. Review every headline and description line of every active ad and remove any language that references, implies, or assumes a health condition of the person reading the ad.

Ad copy that implies awareness of the viewer's financial problems is prohibited. Examples include: Are you behind on your mortgage?, For people struggling with debt, Drowning in credit card bills?, and similar language. Even sympathetic or helpful framing does not make this acceptable. If you offer financial products or services, your ad copy must describe what you offer rather than implying knowledge of the viewer's financial difficulties. Focus the copy on the benefits and features of your product rather than on the financial pain the viewer may be experiencing.

Ad copy that singles out, assumes, or addresses the viewer based on their religion, race, ethnicity, or political beliefs is prohibited. This includes both positive and negative references — for example, an ad that says As a Christian, you deserve the best financial advice is just as much a violation as one that uses a negative assumption. Review all ad headlines and descriptions for any language that makes assumptions about the viewer's religious, racial, or political identity and replace it with copy that speaks to the product or service itself.

Ad copy that implies knowledge of the viewer's sexual orientation, relationship status, or personal relationship difficulties is prohibited. This includes phrases like For gay men looking for insurance or Are you going through a difficult divorce? Review all ad creative and remove any language that makes assumptions about the viewer's personal relationships or sexual identity. You can advertise products or services that are relevant to various communities, but the copy must not assume or reference individual characteristics of the person viewing the ad.

Beyond the specific prohibited categories, Google's broader Personalized Advertising policy prohibits ad copy that feels invasive, exploitative, or like it is using personal knowledge to manipulate the viewer. This includes: ads that use first-person language in ways that imply the advertiser knows personal details about the viewer; ads that combine multiple pieces of implied personal knowledge to create a sense of surveillance; and ads that use emotional vulnerability as a hook. Read every ad as if you were the person receiving it — if it would feel creepy, invasive, or manipulative, it needs to be rewritten.

Dynamic Search Ads, responsive ads, and ads using dynamic keyword insertion automatically generate parts of the ad based on user search queries or page content. If your dynamic templates include variables that could result in the ad reflecting sensitive personal information back to the user — for example, a dynamic template that inserts a health-related search term directly into the ad headline — this can be a violation. Review all dynamic ad templates and ensure that no variable could result in sensitive personal information appearing in the delivered ad.

Your website must have a Privacy Policy that clearly and specifically discloses: every type of data you collect from visitors, including cookies, IP addresses, browsing behaviour, and form submissions; exactly how each type of data is used, including whether it is used for personalised advertising; which third parties receive the data, including Google, Meta, and any other advertising platforms; how long data is retained; and how users can request that their data be deleted. The policy must be written in plain language, not just legal boilerplate. Link to it clearly from the footer of every page on your website.

In the European Union, United Kingdom, and many other regions, placing advertising cookies or tracking pixels on a user's device without their explicit prior consent is illegal and also violates Google's policy. You must implement a cookie consent banner that: appears before any non-essential cookies are set; clearly explains what each category of cookie does; allows users to accept or decline each category separately; remembers the user's choice so they are not asked again on every page; and does not use dark patterns such as pre-ticked boxes or a prominent Accept button alongside a hard-to-find Decline option. Use a reputable consent management platform to implement this correctly.

Google Consent Mode is a technical framework that tells Google's tracking tags whether the user has given consent for advertising cookies and analytics cookies. When consent is not given, the tags operate in a limited mode that does not collect personal data for advertising purposes. If your website operates in regions where cookie consent is required and you have not implemented Google Consent Mode, your remarketing data collection may be non-compliant even if you have a consent banner. Work with your developer or use Google's documentation at developers.google.com/tag-platform/devguides/consent to implement Consent Mode v2 correctly.

In your Google Ads account, go to Tools and Settings, then Account Settings, and look for the Data Collection and Conversion Tracking settings. Review every data sharing option that is currently enabled. For each one, confirm that your privacy policy discloses this data sharing and that users in applicable regions have consented to it before their data was collected. If any data sharing setting was enabled without corresponding user consent disclosure, disable it temporarily while you update your consent and disclosure documentation, then re-enable it once your disclosures are complete.

Use a tag auditing tool — Google Tag Assistant, available as a Chrome extension, is a good starting point — to see every tracking tag and pixel that fires on each page of your website. For each tag identified, check: is it mentioned in your privacy policy? Is it blocked from firing until the user consents, in regions where consent is required? Does it collect any personal or behavioural data? Any tag that collects data for advertising purposes and that fires before user consent in consent-required regions must be moved behind your consent gate so it only fires after the user has given explicit permission.

Your privacy policy should explain how users can opt out of personalised advertising and request deletion of their data. Make sure these processes actually work. If you have a Data Subject Access Request or opt-out form linked from your privacy policy, test it to confirm it submits correctly and that someone receives and processes the submission. If you use a third-party consent management platform, check that its opt-out signals are correctly passed to Google Ads and to any other advertising platform you use. Users who opt out must stop receiving personalised ads — if this is not happening technically, it is a compliance failure.

Google Ads allows you to target specific age groups, genders, parental statuses, and household income tiers. However, excluding demographic groups in ways that result in discriminatory ad delivery — for example, excluding all women from a housing or employment ad — is a violation. Review every campaign's demographic targeting and exclusion settings. Remove any demographic exclusions that could result in people being unfairly denied access to housing, employment, financial services, or credit-related advertising. Note that Google has specific rules for these sensitive ad categories that go beyond general Personalized Advertising requirements.

Custom intent audiences are built by telling Google to target people who have recently searched for specific keywords. Custom affinity audiences are built by providing URLs and interests that define a type of person to reach. Both can violate the Personalized Advertising policy if they are built around sensitive topics. Review every custom audience in your account. Delete any custom intent audience built around health, financial hardship, relationship problems, sexuality, religion, race, or political topics. Replace sensitive custom audiences with broader interest categories or contextual targeting on relevant content.

Google provides ready-made audience segments such as in-market audiences — people who are actively researching specific product categories — and detailed demographic audiences. While these are generally permitted, some combinations of segments can be problematic. For example, using the Parenting segment combined with certain health-related in-market segments could imply sensitive personal information. Review every pre-made audience segment applied to your campaigns and remove any that relate to sensitive personal characteristics or that could be combined with other targeting to imply sensitive personal information about the viewer.

Similar Audiences — which Google now calls Optimised Targeting — creates a new audience of people who share characteristics with your existing audience lists. If the seed list used to create a Similar Audience was itself built from sensitive or prohibited data, the resulting Similar Audience is also in violation. Review all Similar Audience or Optimised Targeting configurations in your campaigns. If any are based on audience lists that were found to be in violation in earlier steps of this checklist, disable the Similar Audience or Optimised Targeting for those campaigns and rebuild them from compliant seed lists.

Remarketing Lists for Search Ads, commonly called RLSA, allows you to adjust your search ad bids and messaging based on whether the searcher has previously visited your website. While this is generally permitted, using RLSA on campaigns related to sensitive topics — such as showing different ads to people who previously visited your health information pages, or adjusting bids based on visitors to pages about financial difficulties — can be a violation. Review all RLSA configurations and remove them from any campaigns where the underlying audience list was built from visits to sensitive content pages.

Smart bidding strategies such as Target CPA, Target ROAS, and Maximise Conversions use historical conversion data and audience signals to optimise bids. If the underlying conversion tracking data or audience signals include data that was collected without proper consent, or if the model is using prohibited personal characteristics as signals, this can be a policy concern. Review your conversion tracking setup and ensure that all conversion events being used in smart bidding strategies were tracked only for users who consented to advertising tracking in regions where consent is required. If consent was not properly collected, the affected conversion data should be excluded from bidding until your consent collection is corrected.

Open an incognito browser window and visit every landing page connected to your flagged campaigns. Trigger your cookie consent banner and verify that it appears before any tracking loads, that it is easy to understand, and that declining cookies is as easy as accepting them. Check that your privacy policy is accessible from the footer and that it clearly describes all advertising data collection. Also go through your Google Ads account in a fresh session and confirm that all prohibited audiences have been removed, all flagged ad copy has been updated, and no sensitive targeting is present in any active campaign.

In Google Ads, go to Tools and Settings and find the Ad Preview and Diagnosis tool. Enter a relevant keyword and select your target location and device type. Preview each ad you have fixed to confirm that the updated copy appears correctly, that no sensitive personal references remain in the ad text, and that the ad leads to a landing page with proper privacy disclosures. The preview tool also shows you whether an ad is currently eligible to show, which gives you a quick indication of whether it has already passed or is still under review.

Before submitting your appeal in Google Ads Policy Manager, prepare a written list of every specific change you made, with dates. For example: 1. Removed audience list named Health Condition Visitors from all campaigns on the date. 2. Updated privacy policy to include full disclosure of Google Ads remarketing tracking on the date. 3. Implemented Google Consent Mode v2 on the website on the date. 4. Rewrote ad headline from sensitive copy to compliant copy in campaign Name on the date. 5. Removed custom intent audience built around debt relief keywords on the date. Specific, dated evidence is far more persuasive to Google reviewers than a general statement that the problem has been resolved.

In your Google Ads account, click the wrench icon, go to Policy Manager, find each disapproved ad or account action, and click Appeal. Paste your specific evidence list into the appeal text box. Keep the tone factual, professional, and focused on the specific changes you made. Do not submit multiple appeals for the same item — duplicate submissions slow down the review process and can flag your account for additional scrutiny. Personalized Advertising policy appeals can take 1 to 7 business days to review, and complex cases involving account-level suspensions may take longer.

The most reliable way to prevent future Personalized Advertising violations is to review every new audience list and campaign before it goes live. Before launching anything new, ask: does this audience list include data from sensitive topic pages? Was the data collected with proper user consent? Does any ad copy reference personal characteristics of the viewer? Does the targeting use any sensitive demographic or personal category? Does the campaign have proper privacy disclosures on its landing page? Answering these questions before launch takes 10 minutes and prevents weeks of disruption from policy violations.

Personalized Advertising compliance is not a one-time fix — it requires ongoing monitoring as your campaigns grow and as regulations change. Set a recurring calendar reminder every three months to: review all audience lists for prohibited data; check that consent mechanisms are still functioning correctly; verify that the privacy policy remains accurate and up to date; check whether any new audience segments added since the last audit are compliant; and review any updates to Google's Personalized Advertising policy that may have been published since your last review. GDPR, CCPA, and similar regulations are also updated periodically, so checking for regulatory changes at the same time is efficient.

Personalized Advertising violations — particularly those involving data privacy, sensitive categories, or account-level actions — are among the most serious and complex issues in Google Ads policy compliance. If your first appeal is rejected, read the response carefully to understand what Google still considers non-compliant, make further specific changes, and resubmit with updated evidence. If your account has been suspended at account level, if you are facing repeated violations, or if the compliance issues involve your data collection infrastructure rather than just ad settings, working with a Google Ads specialist who understands privacy compliance and policy appeals is strongly recommended.