Data Rights Protocol

Standardizing and streamlining consumer data rights requests

The Data Rights Protocol (DRP) is a technical standard for exchanging data rights requests under CCPA. The project began at Consumer Reports Digital Lab in summer 2021, and was announced at a virtual event hosted by MIT Media Lab in October 2021. The protocol is co-developed by a consortium of implementing companies who serve in the role of authorized agent, privacy infrastructure provider, and/or covered business. You can explore the Data Rights Protocol on GitHub and let us know your feedback here.

Interested in collaborating? Sign up here!

🗓️ Roundtable for Businesses🎇

If you're a business that receives data rights requests, read more at DRP for Businesses.

Implementing Companies




This project is led by Dazza Greenwood, Ryan Rix, and Ginny Fahs at Consumer Reports Digital Lab. You can reach them via email at