Data Rights Protocol

Standardizing and streamlining consumer data rights requests

Data Rights Protocol (DRP) is a draft specification that encodes a set of standardized request/response data flows for exercising Personal Data Rights provided under laws like the California Consumer Privacy Act.

Contributors to the DRP specification currently include Consumer Reports Digital Lab, MIT, privacy compliance tech providers DataGrail, Ethyca, OneTrust, Transcend, and WireWheel, covered businesses like Spokeo, and authorized agents like Mine and Surfshark.

Feedback