12 Companies, One Consortium

Working Together to Enable Data Rights

Processing data rights requests often involves several parties. Agents help facilitate consumer requests. Requests are sent to businesses. And many businesses use enterprise software to respond. Companies in each of these roles are collaborating to implement, test and deploy the Data Rights Protocol (DRP).

Consumers

Consumers have rights to control how their data is used under many state laws, and covered businesses have new compliance obligations. The Data Rights Protocol enables covered businesses to process consumer requests with maximum efficiency.

Authorized Agents

Authorized Agents communicate with companies on behalf of consumers to help them exercise their rights. Agents have the authority to act on behalf of the consumer and engage directly with companies. The Data Rights Protocol enables them to initiate and track requests with both privacy infrastructure providers and covered businesses in a standard way.

  • "At Yorba, joining the DRP coalition means championing simpler deletions and paving the way for a transparent, trust-filled digital world."

  • "With DRP we are building foundations that will make it possible to handle consumer data rights requests at true scale"

  • "The Data Rights Protocol is an important step towards making it easy and accessible for consumers to exercise their data rights."

Privacy Infrastructure Providers

Privacy Infrastructure Providers build software that helps companies manage all the data privacy requests they receive from both consumers and agents. Enterprises can leverage Privacy Infrastructure Providers using the Data Rights Protocol to receive, process, and respond to requests using their standard internal workflows.

  • "The protocol helps build trust between consumers and businesses by enabling people to take control of their data and businesses to efficiently fulfill consumers’ requests."

  • "We're proud to contribute to the DRP—getting your data from the companies you engage with should be as easy as it is to provide it in the first place."

Covered Businesses

Covered businesses are those legally obligated under applicable data privacy legislation enacted in certain states to respond to data rights requests sent by consumers residing in such states. When covered businesses receive requests in a standard Data Rights Protocol format, they are able to take action and respond to requests more effectively and quickly.

  • "Standard, more efficient processing of data rights requests is a win for consumers."