Announcing Data Rights Protocol v1.0

The Data Rights Protocol (DRP) consortium is thrilled to announce that we are releasing DRP version 1.0! This protocol has been in development for nearly four years; it’s poised to majorly advance the delivery of privacy rights in the United States. 

Launched in October 2021 by a consortium of 12 implementing partners, the DRP is a standard protocol that streamlines and formalizes how data rights requests are handled. In doing so, it provides more consistency and efficiency for both consumers submitting data rights requests and companies processing them. 

Consortium members OneTrust, Transcend, Yorba, and CR’s own Permission Slip have successfully implemented the latest version of the protocol and will proceed to conducting a full end-to-end interoperability test. We hope the protocol will be ready for deployment in production systems later this year. A big thank you to the teams at OneTrust, Transcend and Yorba for their commitment to advancing this effort.

Also deserving of recognition are Innovation Lab Director of Product R&D Ginny Fahs, Lead Engineer John Szinger, as well as Lab alums Dazza Greenwood and Ryan Rix for the many years of thought and hard work that got us to this point. 

Later this year we plan to convene key stakeholders in helping us shape the governance of the DRP – our final hurdle before production deployment. If you’ve worked on multi-stakeholder open source governance before and are interested in the governance challenge presented by the DRP, drop us a line innovationlab@cr.consumer.org

Get the latest on Innovation at Consumer Reports

Sign up to stay informed

We care about the protection of your data. Read our Privacy Policy