Data Rights Protocol

Standardizing and streamlining consumer data rights requests

The Data Rights Protocol (DRP) is a technical standard for exchanging data rights requests under CCPA. The project began at Consumer Reports Innovation Lab in summer 2021, and was announced at a virtual event hosted by MIT Media Lab in October 2021. The protocol is co-developed by a consortium of implementing companies who serve in the role of authorized agent, privacy infrastructure provider, and/or covered business. You can explore the Data Rights Protocol on GitHub and let us know your feedback by emailing

🗓️ Roundtable for Businesses🎇

If you're a business that receives data rights requests, read more at DRP for Businesses.

Implementing Companies




This project is led by Dazza Greenwood, Ryan Rix, and Ginny Fahs at Consumer Reports Innovation Lab. You can reach them via email at