Scaling Data Rights

Laws like CCPA create a new class of data rights, but they’re hard for consumers to use. In summer 2021, the Digital Lab at Consumer Reports began work on a “Data Rights Protocol” (DRP) that seeks to standardize the technical interchange of data rights requests.

Data Rights Protocol (DRP) is a draft specification that encodes a set of standardized request/response data flows for exercising Personal Data Rights provided under laws like the California Consumer Privacy Act. This protocol allows for the exchange of data rights requests between consumers, authorized agents, privacy compliance tech companies, and covered businesses and makes the evocation of these rights more consistent and efficient.