Outlook
Part of How PPC agency buying is changing
A platform API or a marketing qualification for PPC agencies AI applications
Where the data behind PPC agencies AI applications comes from, including Google Ads API documentation, CIM training and UK data protection law.
What to take away
- A Manchester agency pitching automated bidding to a client will be asked one question first: where does the data come from? Answer that before showing any tool.
- Google's own API documentation is the primary source for what can be automated inside paid search, and it is free to read. See the Google Ads API overview.
- Team capability matters too. The CIM Foundation Certificate in Professional & Digital Marketing is a Level 3 qualification that sets a baseline for the people running the account.
- Personal data handling sits under the UK GDPR and the Data Protection Act 2018, enforced by the Information Commissioner's Office. The Human Rights Act 1998 is not a data protection statute, but it is still cited in discussions about how personal data duties developed.
- The API and the qualification do different jobs. The API sets what a platform will let you automate; the qualification sets what the person configuring it understands.
Why agency claims differ
Ask two English agencies which AI applications matter and you will get two different lists. Platform API documentation shows what can be automated. A qualification shows what a team has studied. Data protection law sets what is allowed. Those three are the tests a client should apply before approving a tool, and the API and the qualification are the two that get confused.
What the Google Ads API automates
The Google Ads API documentation is the reference point for what an account can actually automate. It describes the interface agencies use to read performance data, adjust bids and manage campaigns at scale. For example, it exposes campaign bid adjustment through the CampaignBidModifierService. The features clients usually call AI, such as Smart Bidding and Performance Max, are configured and reported through the same platform; the API is the programmatic route into them.
Testing an automation claim
- Name the Google Ads API documentation
- Check if feature sits inside it
- Say whether team builds on API
- Avoid working from hearsay
If a provider claims a task can be automated, this documentation is where that claim is tested. Not every agency needs to build on the API. But a team that cannot say whether a feature sits inside it is working from hearsay.
Google is not the only platform in play. The Microsoft Advertising API does the same job across Bing and the Microsoft network, and an agency that runs both platforms needs both sets of documentation before it can say what is automatable.
Where team skills fit
Automation does not remove the need for judgement. It moves the judgement earlier, into how rules are set and which signals are trusted.
The CIM Foundation Certificate in Professional & Digital Marketing is a Level 3 qualification, with modules that include Marketing Principles. It is one recognised route for building that baseline. It covers digital marketing fundamentals rather than platform specifics, so treat it as a floor, not a ceiling.
An agency can cite it when describing staff development. A buyer can ask which team members hold it and what changed in their work afterwards.
Platform API or qualification: which to rely on
They answer different questions, so the honest answer is that the choice depends on what is being bought.
- Test the claimcan this be automated? That is a platform API question. The Google Ads API and the Microsoft Advertising API list exactly what an account will accept programmatically, and enterprise bid managers such as Search Ads 360 sit on top of those interfaces.
- Test the teamwho is setting the rules? That is a qualification question. The CIM Foundation Certificate shows a studied marketing baseline; it does not certify platform skill.
- Test the legalityis the data use allowed? Neither answers that. Data protection law does, and no API or certificate removes the need to explain the lawful basis.
The practical order for an English agency is API first, qualification second. The platform sets the ceiling on what can be automated, so a claim that falls outside the API cannot be delivered however well qualified the team is. The qualification matters when the gap is judgement, such as choosing which signals to trust or explaining a change to a client, rather than delivery. Where both are missing, automation is being sold on the strength of the word alone.
Data protection sits underneath everything
AI applications in PPC often touch audience data, remarketing lists and conversion signals. That brings personal data handling into scope.
UK data protection law now operates through the UK GDPR and the Data Protection Act 2018. The Information Commissioner's Office enforces both. The Human Rights Act 1998 is not data protection legislation, though it is still cited in discussions about how personal data duties developed in the UK.
Under Article 6 of the UK GDPR, consent is one lawful basis among several. That is why consent and evidence weigh so heavily in current practice.
For an English agency, the practical test is simple. Can you explain, in one paragraph, what personal data enters the automation and on what basis?
A short glossary
- APIan interface that lets one system read from or write to another, such as a platform's advertising system.
- Bid automationsoftware that adjusts bids using rules or models rather than manual changes.
- Primary sourcethe original documentation, statute or dataset, rather than a summary of it.
- Consenta lawful basis for processing personal data where the individual has agreed.
- Baseline qualificationa training standard showing minimum expected knowledge.
Common questions
These are the questions that come up most often when a client asks how an account is run.
Are AI applications in PPC mainly about bidding?
No. Bidding is the most visible use, through Smart Bidding and Performance Max, but automation also covers reporting, budget pacing and creative testing. The Google Ads API documentation shows the range of operations available.
Do English agencies need a qualification to use AI tools?
There is no legal requirement. Qualifications such as the CIM Foundation Certificate help demonstrate a baseline of marketing knowledge, which is useful when clients ask who runs the account.
Does the Human Rights Act still govern PPC data?
No. The UK GDPR and the Data Protection Act 2018 are the current framework, enforced by the Information Commissioner's Office. The Human Rights Act 1998 is not a data protection statute; it is still cited because it shaped wider duties around personal data in the UK.
How often should sources be rechecked?
At least once per planning cycle, and sooner if a platform announces a change. Undated claims are the ones that cause trouble in a client review.
