12 Companies, One Consortium

Working Together to Enable Data Rights

Processing data rights requests often involves several parties. Agents help facilitate consumer requests. Requests are sent to businesses. And many businesses use enterprise software to respond. Companies in each of these roles are collaborating to implement, test and deploy the Data Rights Protocol (DRP).


Consumers have rights to control how their data is used under many state laws, and covered businesses have new compliance obligations. The Data Rights Protocol enables covered businesses to process consumer requests with maximum efficiency.

Authorized Agents

Authorized Agents communicate with companies on behalf of consumers to help them exercise their rights. Agents have the authority to act on behalf of the consumer and engage directly with companies. The Data Rights Protocol enables them to initiate and track requests with both privacy infrastructure providers and covered businesses in a standard way.

Privacy Infrastructure Providers

Privacy Infrastructure Providers build software that helps companies manage all the data privacy requests they receive from both consumers and agents. Enterprises can leverage Privacy Infrastructure Providers using the Data Rights Protocol to receive, process, and respond to requests using their standard internal workflows.

Covered Businesses

Covered businesses are those legally obligated under applicable data privacy legislation enacted in certain states to respond to data rights requests sent by consumers residing in such states. When covered businesses receive requests in a standard Data Rights Protocol format, they are able to take action and respond to requests more effectively and quickly.